Все бюллетени/p7/ALT-PU-2015-1033-1
ALT-PU-2015-1033-1

Обновление пакета salt в ветке p7

Версия2014.7-alt2.M70P.1
Задание#138062
Опубликовано2015-01-13
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (2)

CVE-2013-4438
HIGH7.5

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

Опубликовано: 2013-11-05Изменено: 2026-04-29
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVE-2014-3563
HIGH7.2

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

Опубликовано: 2014-08-22Изменено: 2025-04-12
CVSS 2.0ВЫСОКАЯ 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C