{"id":"CVE-2021-3148","aliases":["ALPINE-CVE-2021-3148","DLA-2815-1","EUVD-2021-0232","GHSA-ghc2-hx3w-jqmp","PYSEC-2021-55","SUSE-RU-2021:0632-1","SUSE-RU-2021:0633-1","SUSE-SU-2021:0624-1","SUSE-SU-2021:0626-1","SUSE-SU-2021:0627-1","SUSE-SU-2021:0628-1","SUSE-SU-2021:0630-1","SUSE-SU-2021:0631-1","SUSE-SU-2021:0914-1","SUSE-SU-2021:0915-1","SUSE-SU-2021:14650-1","SUSE-SU-2021:1690-1","UBUNTU-CVE-2021-3148","USN-6948-1","openSUSE-SU-2021:0347-1"],"status":"published","title":"SaltStack Salt command injection in the Salt-API when using the Salt-SSH client","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08246,"percentile":0.94938,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-77"],"published":"2021-02-26T10:11:02Z","modified":"2026-11-03T06:32:40Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["2015.8.13","2016.11.5","2016.11.10","2017.7.8","2019.2.8","3000.7","3001.5","3002.3","2015.8.10","2016.3.4","2016.3.6","2016.3.8","2016.11.3","2019.2.0rc1","2019.2.5","3000.6","3001.4","3002.5"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.13","package":"salt","fixed_in":["3002.5-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","fixed_in":["2017.7.4+dfsg1-1ubuntu18.04.2+esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.13"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.3.0"},{"fixed":"2016.11.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.11.7"},{"fixed":"2016.11.10"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2017.5.0"},{"fixed":"2017.7.8"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2018.2.0"},{"last_affected":"2018.3.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2019.2.0"},{"fixed":"2019.2.8"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3000"},{"fixed":"3000.7"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3001"},{"fixed":"3001.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3002"},{"fixed":"3002.3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2015.8.11"},{"fixed":"3002.5-r0"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.2+ds-1+deb9u7"}]}],"versions":["2016.11.2+ds-1","2016.11.2+ds-1+deb9u1","2016.11.2+ds-1+deb9u2","2016.11.2+ds-1+deb9u3","2016.11.2+ds-1+deb9u4","2016.11.2+ds-1+deb9u5","2016.11.2+ds-1+deb9u6"],"bundled":11},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.13"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.3.0"},{"fixed":"2016.11.5"}]}],"versions":["2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.2","2016.11.3","2016.11.4","2016.3.0","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2016.11.7"},{"fixed":"2016.11.10"}]}],"versions":["2016.11.7","2016.11.8","2016.11.9"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2017.5.0"},{"fixed":"2017.7.8"}]}],"versions":["2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2018.2.0"},{"last_affected":"2018.3.5"}]}],"versions":["2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2019.2.0"},{"fixed":"2019.2.8"}]}],"versions":["2019.2.0","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3000"},{"fixed":"3000.7"}]}],"versions":["3000","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3001"},{"fixed":"3001.5"}]}],"versions":["3001","3001.1","3001.2","3001.3","3001.4"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3002"},{"fixed":"3002.3"}]}],"versions":["3002","3002.1","3002.2"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.10"},{"introduced":"2015.8.11"},{"fixed":"2015.8.13"},{"introduced":"2016.3.0"},{"fixed":"2016.3.4"},{"introduced":"2016.3.5"},{"fixed":"2016.3.6"},{"introduced":"2016.3.7"},{"fixed":"2016.3.8"},{"introduced":"2016.11.0"},{"fixed":"2016.11.3"},{"introduced":"2016.11.4"},{"fixed":"2016.11.5"},{"introduced":"2016.11.7"},{"fixed":"2016.11.10"},{"introduced":"2017.7.0"},{"fixed":"2017.7.8"},{"introduced":"2018.3.0rc1"},{"fixed":"2019.2.0rc1"},{"introduced":"2019.2.0"},{"fixed":"2019.2.5"},{"introduced":"2019.2.6"},{"fixed":"2019.2.8"},{"introduced":"3000"},{"fixed":"3000.6"},{"introduced":"3001"},{"fixed":"3001.4"},{"introduced":"3002"},{"fixed":"3002.5"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.11","2015.8.12","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.1","2016.11.2","2016.11.4","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.1","2016.3.2","2016.3.3","2016.3.5","2016.3.7","2017.7.0","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.6","2019.2.7","3000","3000.1","3000.2","3000.3","3000.4","3000.5","3001","3001.1","3001.2","3001.3","3002","3002.1","3002.2","3002.3","3002.4"]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.12.1-0.16.52.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.12.1-0.16.52.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.12.1-3.68.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5.1-3.26.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5.1-3.26.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5.1-3.38.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-6.8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-10.22.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-46.129.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-46.129.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 12 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-46.129.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-5.106.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-5.106.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-5.106.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-5.106.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-43.69.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-43.69.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.7.4+dfsg1-1ubuntu18.04.2+esm1"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.8+ds-1ubuntu0.1+esm2"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.7.4+dfsg1-1ubuntu18.04.2+esm1"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-lp152.3.27.1"}]}],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"saltstack","product":"salt"}],"references":[{"url":"https://github.com/saltstack/salt/releases","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/","tags":["x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202103-01","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-5011","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202310-22","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3148","tags":["advisory"]},{"url":"https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB","tags":["web"]},{"url":"https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23","tags":["web"]},{"url":"https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23","tags":["web"]},{"url":"https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23","tags":["web"]},{"url":"https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-ghc2-hx3w-jqmp","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3148","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2021-632/suse-ru-20210632-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181550","tags":["report"]},{"url":"https://bugzilla.suse.com/1181556","tags":["report"]},{"url":"https://bugzilla.suse.com/1181557","tags":["report"]},{"url":"https://bugzilla.suse.com/1181558","tags":["report"]},{"url":"https://bugzilla.suse.com/1181559","tags":["report"]},{"url":"https://bugzilla.suse.com/1181560","tags":["report"]},{"url":"https://bugzilla.suse.com/1181561","tags":["report"]},{"url":"https://bugzilla.suse.com/1181562","tags":["report"]},{"url":"https://bugzilla.suse.com/1181563","tags":["report"]},{"url":"https://bugzilla.suse.com/1181564","tags":["report"]},{"url":"https://bugzilla.suse.com/1181565","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2021-633/suse-ru-20210633-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210624-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182740","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210626-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210627-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210628-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210630-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210631-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210914-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1099976","tags":["report"]},{"url":"https://bugzilla.suse.com/1172110","tags":["report"]},{"url":"https://bugzilla.suse.com/1174855","tags":["report"]},{"url":"https://bugzilla.suse.com/1177474","tags":["report"]},{"url":"https://bugzilla.suse.com/1179696","tags":["report"]},{"url":"https://bugzilla.suse.com/1181347","tags":["report"]},{"url":"https://bugzilla.suse.com/1182382","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25315","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210915-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180101","tags":["report"]},{"url":"https://bugzilla.suse.com/1180818","tags":["report"]},{"url":"https://bugzilla.suse.com/1181290","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114650-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211690-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176293","tags":["report"]},{"url":"https://bugzilla.suse.com/1179831","tags":["report"]},{"url":"https://bugzilla.suse.com/1181368","tags":["report"]},{"url":"https://bugzilla.suse.com/1182281","tags":["report"]},{"url":"https://bugzilla.suse.com/1182293","tags":["report"]},{"url":"https://bugzilla.suse.com/1185092","tags":["report"]},{"url":"https://bugzilla.suse.com/1185281","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31607","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3148","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6948-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-16846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-25281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-25282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-25283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-25284","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYH7ONK65HNBANHLED5R64OBSM2EORYI/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3148","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T00:00:00Z","modified":"2024-08-03T16:45:51.371Z","updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-0232","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T00:00:00Z","modified":"2024-08-03T16:45:51Z","updated_at":"2026-11-03T03:25:14.091701Z"}],"ghsa":[{"id":"GHSA-ghc2-hx3w-jqmp","title":"SaltStack Salt command injection in the Salt-API when using the Salt-SSH client","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in `salt.utils.thin.gen_thin()` command injection because of different handling of single versus double quotes. This is related to `salt/utils/thin.py`.","status":"published","published":"2022-05-24T17:43:23Z","modified":"2024-10-23T18:27:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:38:13.09489Z"}],"nvd":[{"id":"CVE-2021-3148","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T05:15:14.19Z","modified":"2026-06-17T04:04:44.873Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:06:50.399901Z"}],"osv":[{"id":"ALPINE-CVE-2021-3148","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T05:15:14.19Z","modified":"2026-11-03T06:32:40.344893018Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"CVE-2021-3148","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T05:15:14.19Z","modified":"2026-10-20T10:54:40.254795786Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"GHSA-ghc2-hx3w-jqmp","title":"SaltStack Salt command injection in the Salt-API when using the Salt-SSH client","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in `salt.utils.thin.gen_thin()` command injection because of different handling of single versus double quotes. This is related to `salt/utils/thin.py`.","status":"published","published":"2022-05-24T17:43:23Z","modified":"2024-10-23T18:40:40.707355Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:47.822182Z"},{"id":"UBUNTU-CVE-2021-3148","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T05:15:00Z","modified":"2026-04-02T18:32:53.265436Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"DLA-2815-1","title":"salt - security update","status":"published","published":"2021-11-10T00:00:00Z","modified":"2026-03-09T01:22:27.852462Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2021:0347-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow `extra_filerefs` as sanitized `kwargs` for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- virt: search for `grub.xen` path\n- Xen spicevmc, DNS SRV records backports:\n  - Fix virtual network generated DNS XML for SRV records\n  - Don't add spicevmc channel to xen VMs\n- virt UEFI fix: virt.update when `efi=True` \n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-02-26T15:23:51Z","modified":"2025-05-07T18:12:01.993681Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"PYSEC-2021-55","description":"An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.","status":"published","published":"2021-02-27T05:15:00Z","modified":"2026-06-10T17:02:38.760969329Z","updated_at":"2026-11-02T15:52:53.119977Z"},{"id":"SUSE-RU-2021:0632-1","title":"Recommended update for SUSE Manager 4.0.12.1 Release Notes","description":"This update for SUSE Manager 4.0.12.1 Release Notes provides the following additions:\n\nRelease notes for SUSE Manager:\n\n- Revision 4.0.12.1\n- Bugs mentioned\n  bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, \n  bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, \n  CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144\n\nRelease notes for SUSE Manager proxy:\n\n- Update to 4.0.12.1\n- Bugs mentioned\n  bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, \n  bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, \n  CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144\n","status":"published","published":"2021-02-26T10:14:00Z","modified":"2026-02-04T03:35:47.446002Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2021:0633-1","title":"Recommended update for SUSE Manager 4.1.5.1 Release Notes","description":"This update for SUSE Manager 4.1.5.1 Release Notes provides the following additions:\n\nRelease notes for SUSE Manager:\n\n- Revision 4.1.5.1\n- Bugs mentioned\n  bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, \n  bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, \n  CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144\n\nRelease notes for SUSE Manager proxy:\n\n- Revision 4.1.5.1\n  bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bsc#1181563, \n  bsc#1181564, bsc#1181565, CVE-2021-25281, CVE-2021-25282, CVE-2021-3197, CVE-2021-25283, CVE-2020-28243, \n  CVE-2020-35662, CVE-2021-25284, CVE-2020-28972, CVE-2021-3148, CVE-2021-3144\n","status":"published","published":"2021-02-26T10:14:11Z","modified":"2026-02-04T02:16:21.372411Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2021:0624-1","title":"Security update for py26-compat-salt","description":"This update for py26-compat-salt fixes the following issues:\n\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n","status":"published","published":"2021-02-26T10:11:02Z","modified":"2026-02-04T03:32:46.494378Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0626-1","title":"Security update for py26-compat-salt","description":"This update for py26-compat-salt fixes the following issues:\n\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n","status":"published","published":"2021-02-26T10:11:12Z","modified":"2026-02-04T03:20:50.127491Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0627-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow `extra_filerefs` as sanitized `kwargs` for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- virt: search for `grub.xen` path\n- Xen spicevmc, DNS SRV records backports:\n  - Fix virtual network generated DNS XML for SRV records\n  - Don't add spicevmc channel to xen VMs\n- virt UEFI fix: virt.update when `efi=True`\n","status":"published","published":"2021-02-26T10:11:25Z","modified":"2026-02-04T02:56:47.928153Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0628-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow `extra_filerefs` as sanitized `kwargs` for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- virt: search for `grub.xen` path\n- Xen spicevmc, DNS SRV records backports:\n  - Fix virtual network generated DNS XML for SRV records\n  - Don't add spicevmc channel to xen VMs\n- virt UEFI fix: virt.update when `efi=True`  \n","status":"published","published":"2021-02-26T10:11:38Z","modified":"2026-02-04T03:13:04.516874Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0630-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow `extra_filerefs` as sanitized `kwargs` for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- virt: search for `grub.xen` path\n- Xen spicevmc, DNS SRV records backports:\n  - Fix virtual network generated DNS XML for SRV records\n  - Don't add spicevmc channel to xen VMs\n- virt UEFI fix: virt.update when `efi=True` \n","status":"published","published":"2021-02-26T10:12:13Z","modified":"2026-02-04T02:27:36.783038Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0631-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- virt: search for grub.xen path\n- Xen spicevmc, DNS SRV records backports:\n  Fix virtual network generated DNS XML for SRV records\n  Don't add spicevmc channel to xen VMs\n- virt UEFI fix: virt.update when efi=True\n","status":"published","published":"2021-02-26T10:12:31Z","modified":"2026-02-04T02:22:41.32944Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0914-1","title":"Security Beta update for Salt","description":"This update fixes the following issues:\n\nsalt:\n\n- virt.network_update: handle missing ipv4 netmask attribute\n- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)\n- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)\n- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)\n- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)\n- Always require python-certifi (used by salt.ext.tornado)\n- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)\n- Master can read grains (bsc#1179696)\n\n","status":"published","published":"2021-03-19T16:15:51Z","modified":"2026-02-04T04:30:50.621967Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0915-1","title":"Security Beta update for Salt","description":"This update fixes the following issues:\n\nsalt:\n\n- Only require python-certifi for CentOS7\n- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)\n- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)\n- Fix recursion false detection in payload (bsc#1180101)\n- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)\n- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)\n- Always require python-certifi (used by salt.ext.tornado)\n- Exclude SLE 12 from requiring python-certifi \n- Do not crash when unexpected cmd output at listing patches (bsc#1181290)\n- Fix behavior for 'onlyif/unless' when multiple conditions (bsc#1180818)\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- Virt: search for grub.xen path\n- Xen spicevmc, DNS SRV records backports:\n  Fix virtual network generated DNS XML for SRV records\n  Don't add spicevmc channel to xen VMs\n- Virt UEFI fix: virt.update when efi=True\n- Master can read grains (bsc#1179696)\n\n","status":"published","published":"2021-03-19T16:16:02Z","modified":"2026-02-04T02:35:19.75512Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14650-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow `extra_filerefs` as sanitized `kwargs` for SSH client\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) \n","status":"published","published":"2021-02-26T10:11:55Z","modified":"2026-02-04T02:48:52.916636Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1690-1","title":"Security Beta update for Salt","description":"This update fixes the following issues:\n\nsalt:\n\n- Update to Salt release version 3002.2 (jsc#ECO-3212)  \n- Drop support for Python2. Obsoletes 'python2-salt' package\n- Virt module updates\n  * network: handle missing ipv4 netmask attribute\n  * more network support\n  * PCI/USB host devices passthrough support\n- Set distro requirement to oldest supported version in requirements/base.txt\n- Bring missing part of async batch implementation back\n- Always require python3-distro (bsc#1182293)\n- Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing\n- Remove msgpack \u003c 1.0.0 from base requirements (bsc#1176293)\n- Msgpack support for version \u003e= 1.0.0 (bsc#1171257)\n- Fix issue parsing errors in ansiblegate state module\n- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)\n- Transactional_update: detect recursion in the executor\n- Add subpackage salt-transactional-update\n- Remove duplicate directories from specfile\n- Improvements on 'ansiblegate' module (bsc#1185092):\n  * New methods: ansible.targets / ansible.discover_playbooks\n- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)\n- Regression fix of salt-ssh on processing targets\n- Update target fix for salt-ssh and avoiding race condition\n  on salt-ssh event processing (bsc#1179831, bsc#1182281)\n- Add notify beacon for Debian/Ubuntu systems\n- Fix zmq bug that causes salt-call to freeze (bsc#1181368)\n- Add core grains support for AlmaLinux\n- Allow vendor change option with zypper\n- Virt: virtual network backports to Salt 3000\n- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)\n- Only require python-certifi for CentOS7\n- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)\n- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)\n- Fix recursion false detection in payload (bsc#1180101)\n- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)\n- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)\n- Always require python-certifi (used by salt.ext.tornado)\n- Exclude SLE 12 from requiring python-certifi\n- Do not crash when unexpected cmd output at listing patches (bsc#1181290)\n- Fix behavior for 'onlyif/unless' when multiple conditions (bsc#1180818)\n- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)\n- Allow extra_filerefs as sanitized kwargs for SSH client\n- Fix errors with virt.update\n- Fix for multiple for security issues\n  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)\n  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)\n  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)\n  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)\n- Virt: search for grub.xen path\n- Xen spicevmc, DNS SRV records backports:\n  Fix virtual network generated DNS XML for SRV records\n  Don't add spicevmc channel to xen VMs\n- Virt UEFI fix: virt.update when efi=True\n- Revert wrong zypper  patch to support vendorchanges flags on pkg.install\n\n","status":"published","published":"2021-05-21T14:42:41Z","modified":"2026-02-04T02:47:49.54557Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-6948-1","title":"salt vulnerabilities","description":"It was discovered that Salt incorrectly handled crafted web requests.\nA remote attacker could possibly use this issue to run arbitrary\ncommands. (CVE-2020-16846)\n\nIt was discovered that Salt incorrectly created certificates with weak\nfile permissions. (CVE-2020-17490)\n\nIt was discovered that Salt incorrectly handled credential validation.\nA remote attacker could possibly use this issue to bypass authentication.\n(CVE-2020-25592)\n\nIt was discovered that Salt incorrectly handled crafted process names.\nAn attacker could possibly use this issue to run arbitrary commands.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2020-28243)\n\nIt was discovered that Salt incorrectly handled validation of SSL/TLS\ncertificates. A remote attacker could possibly use this issue to spoof\na trusted entity. (CVE-2020-28972, CVE-2020-35662)\n\nIt was discovered that Salt incorrectly handled credential validation.\nA remote attacker could possibly use this issue to run arbitrary code.\n(CVE-2021-25281)\n\nIt was discovered that Salt incorrectly handled crafted paths. A remote\nattacker could possibly use this issue to perform directory traversal.\n(CVE-2021-25282)\n\nIt was discovered that Salt incorrectly handled template rendering. A\nremote attacker could possibly this issue to run arbitrary code.\n(CVE-2021-25283)\n\nIt was discovered that Salt incorrectly handled logging. An attacker\ncould possibly use this issue to discover credentials. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2021-25284)\n\nIt was discovered that Salt incorrectly handled crafted web requests.\nA remote attacker could possibly use this issue to run arbitrary\ncommands. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3148)\n\nIt was discovered that Salt incorrectly handled input sanitization.\nA remote attacker could possibly use this issue to run arbitrary\ncommands. (CVE-2021-3197)\n","status":"published","published":"2024-08-08T19:21:44Z","modified":"2026-06-25T13:32:28.878918772Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}