{"id":"CVE-2017-5200","aliases":["EUVD-2017-0123","GHSA-8r7r-x48r-pf8f","PYSEC-2017-39","SUSE-SU-2017:1581-1","SUSE-SU-2017:1582-1","UBUNTU-CVE-2017-5200"],"status":"published","title":"SaltStack Salt arbitrary command execution in Salt-api via ssh_client","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03294,"percentile":0.88573,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-06-16T11:48:45Z","modified":"2026-10-24T10:30:53Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["2015.8.13","2016.3.5","2016.11.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.13"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.3.0"},{"fixed":"2016.3.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.11.0"},{"fixed":"2016.11.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.13"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.3.0"},{"fixed":"2016.3.5"}]}],"versions":["2016.3.0","2016.3.1","2016.3.2","2016.3.3","2016.3.4"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.11.0"},{"fixed":"2016.11.2"}]}],"versions":["2016.11.0","2016.11.1"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.13"},{"introduced":"2016.3"},{"fixed":"2016.3.5"},{"introduced":"2016.11"},{"fixed":"2016.11.2"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.1","2016.3.0","2016.3.1","2016.3.2","2016.3.3","2016.3.4"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-42.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-42.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 12 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.4-45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]}],"products":[{"vendor":"saltstack","product":"salt"}],"references":[{"url":"https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5200","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-39.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8r7r-x48r-pf8f","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171581-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1011800","tags":["report"]},{"url":"https://bugzilla.suse.com/1012999","tags":["report"]},{"url":"https://bugzilla.suse.com/1017078","tags":["report"]},{"url":"https://bugzilla.suse.com/1020831","tags":["report"]},{"url":"https://bugzilla.suse.com/1022562","tags":["report"]},{"url":"https://bugzilla.suse.com/1025896","tags":["report"]},{"url":"https://bugzilla.suse.com/1027240","tags":["report"]},{"url":"https://bugzilla.suse.com/1027722","tags":["report"]},{"url":"https://bugzilla.suse.com/1030009","tags":["report"]},{"url":"https://bugzilla.suse.com/1030073","tags":["report"]},{"url":"https://bugzilla.suse.com/1032931","tags":["report"]},{"url":"https://bugzilla.suse.com/1035912","tags":["report"]},{"url":"https://bugzilla.suse.com/1035914","tags":["report"]},{"url":"https://bugzilla.suse.com/1036125","tags":["report"]},{"url":"https://bugzilla.suse.com/1038855","tags":["report"]},{"url":"https://bugzilla.suse.com/1039370","tags":["report"]},{"url":"https://bugzilla.suse.com/1040584","tags":["report"]},{"url":"https://bugzilla.suse.com/1040886","tags":["report"]},{"url":"https://bugzilla.suse.com/1043111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8109","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171582-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5200","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-5200","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2017-09-26T14:00:00Z","modified":"2024-08-05T14:55:35.542Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-0123","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2017-09-26T14:00:00Z","modified":"2024-08-05T14:55:35Z","updated_at":"2026-11-03T02:39:16.959487Z"}],"ghsa":[{"id":"GHSA-8r7r-x48r-pf8f","title":"SaltStack Salt arbitrary command execution in Salt-api via ssh_client","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2022-05-13T01:46:08Z","modified":"2024-10-21T21:07:26Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2017-5200","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2017-09-26T14:29:00.597Z","modified":"2026-06-17T01:20:08.927Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"CVE-2017-5200","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2017-09-26T14:29:00.597Z","modified":"2026-10-24T10:30:53.708759812Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.029968Z"},{"id":"GHSA-8r7r-x48r-pf8f","title":"SaltStack Salt arbitrary command execution in Salt-api via ssh_client","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2022-05-13T01:46:08Z","modified":"2024-12-01T05:39:10.344621Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:42.78452Z"},{"id":"UBUNTU-CVE-2017-5200","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. Users of Salt-API and salt-ssh could execute a command on the salt master via a hole when both systems were enabled.","status":"published","published":"2017-09-26T14:29:00Z","modified":"2026-04-08T13:39:09.374855Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.388065Z"},{"id":"PYSEC-2017-39","description":"Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.","status":"published","published":"2017-09-26T14:29:00Z","modified":"2026-06-10T17:02:37.756892898Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"SUSE-SU-2017:1581-1","title":"Security update for Salt","description":"\nThis update for salt provides version 2016.11.4 and brings various fixes and improvements:\n\n- Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade.\n- Fix format error. (bsc#1043111)\n- Fix ownership for whole master cache directory. (bsc#1035914)\n- Disable 3rd party runtime packages to be explicitly recommended. (bsc#1040886)    \n- Fix insecure permissions in salt-ssh temporary files. (bsc#1035912, CVE-2017-8109)\n- Disable custom rosters for Salt SSH via Salt API. (bsc#1011800, CVE-2017-5200)\n- Orchestrate and batches don't return false failed information anymore.\n- Speed-up cherrypy by removing sleep call.\n- Fix os_family grains on SUSE. (bsc#1038855)\n- Fix setting the language on SUSE systems. (bsc#1038855)\n- Use SUSE specific salt-api.service. (bsc#1039370)\n- Fix using hostname for minion ID as '127'.\n- Fix core grains constants for timezone. (bsc#1032931)\n- Minor fixes on new pkg.list_downloaded.\n- Listing all type of advisory patches for Yum module.\n- Prevents zero length error on Python 2.6.\n- Fixes zypper test error after backporting.\n- Raet protocol is no longer supported. (bsc#1020831)\n- Fix moving SSH data to the new home. (bsc#1027722)\n- Fix logrotating /var/log/salt/minion. (bsc#1030009)\n- Fix result of master_tops extension is mutually overwritten. (bsc#1030073)\n- Allows to set 'timeout' and 'gather_job_timeout' via kwargs.\n- Allows to set custom timeouts for 'manage.up' and 'manage.status'.\n- Use salt's ordereddict for comparison.\n- Fix scripts for salt-proxy.\n- Add openscap module.\n- File.get_managed regression fix.\n- Fix translate variable arguments if they contain hidden keywords. (bsc#1025896)\n- Added unit test for dockerng.sls_build dryrun.\n- Added dryrun to dockerng.sls_build.\n- Update dockerng minimal version requirements.\n- Fix format error in error parsing.\n- Keep fix for migrating salt home directory. (bsc#1022562)\n- Fix  salt pkg.latest raises exception if package is not available. (bsc#1012999)\n- Timezone should always be in UTC. (bsc#1017078)\n- Fix timezone handling for rpm installtime. (bsc#1017078)\n- Increasing timeouts for running integrations tests.\n- Add buildargs option to dockerng.build module.\n- Fix error when missing ssh-option parameter.\n- Re-add yum notify plugin.\n- All kwargs to dockerng.create to provide all features to sls_build as well.\n- Datetime should be returned always in UTC.\n- Fix possible crash  while deserialising data on infinite recursion in scheduled state. (bsc#1036125)\n- Documentation refresh to 2016.11.4\n- For a detailed description, please refer to:\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.1.html\n","status":"published","published":"2017-06-16T11:48:45Z","modified":"2026-02-04T04:03:01.996963Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1582-1","title":"Security update for Salt","description":"\nThis update for salt provides version 2016.11.4 and brings various fixes and improvements:\n\n- Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade.\n- Fix format error. (bsc#1043111)\n- Fix ownership for whole master cache directory. (bsc#1035914)\n- Disable 3rd party runtime packages to be explicitly recommended. (bsc#1040886)\n- Fix insecure permissions in salt-ssh temporary files. (bsc#1035912, CVE-2017-8109)\n- Disable custom rosters for Salt SSH via Salt API. (bsc#1011800, CVE-2017-5200)\n- Orchestrate and batches don't return false failed information anymore.\n- Speed-up cherrypy by removing sleep call.\n- Fix os_family grains on SUSE. (bsc#1038855)\n- Fix setting the language on SUSE systems. (bsc#1038855)\n- Use SUSE specific salt-api.service. (bsc#1039370)\n- Fix using hostname for minion ID as '127'.\n- Fix core grains constants for timezone. (bsc#1032931)\n- Minor fixes on new pkg.list_downloaded.\n- Listing all type of advisory patches for Yum module.\n- Prevents zero length error on Python 2.6.\n- Fixes zypper test error after backporting.\n- Raet protocol is no longer supported. (bsc#1020831)\n- Fix moving SSH data to the new home. (bsc#1027722)\n- Fix logrotating /var/log/salt/minion. (bsc#1030009)\n- Fix result of master_tops extension is mutually overwritten. (bsc#1030073)\n- Allows to set 'timeout' and 'gather_job_timeout' via kwargs.\n- Allows to set custom timeouts for 'manage.up' and 'manage.status'.\n- Use salt's ordereddict for comparison.\n- Fix scripts for salt-proxy.\n- Add openscap module.\n- File.get_managed regression fix.\n- Fix translate variable arguments if they contain hidden keywords. (bsc#1025896)\n- Added unit test for dockerng.sls_build dryrun.\n- Added dryrun to dockerng.sls_build.\n- Update dockerng minimal version requirements.\n- Fix format error in error parsing.\n- Keep fix for migrating salt home directory. (bsc#1022562)\n- Fix  salt pkg.latest raises exception if package is not available. (bsc#1012999)\n- Timezone should always be in UTC. (bsc#1017078)\n- Fix timezone handling for rpm installtime. (bsc#1017078)\n- Increasing timeouts for running integrations tests.\n- Add buildargs option to dockerng.build module.\n- Fix error when missing ssh-option parameter.\n- Re-add yum notify plugin.\n- All kwargs to dockerng.create to provide all features to sls_build as well.\n- Datetime should be returned always in UTC.\n- Fix possible crash  while deserialising data on infinite recursion in scheduled state. (bsc#1036125)\n- Documentation refresh to 2016.11.4\n- For a detailed description, please refer to:\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html\n  + https://docs.saltstack.com/en/develop/topics/releases/2016.11.1.html\n","status":"published","published":"2017-06-16T11:49:27Z","modified":"2026-02-04T03:07:42.551163Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}