Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_ceph_storage_2:salt salt as a component of Red Hat Ceph Storage 2 | affected | no version stated vendor label: salt | no fix planned | csaf_redhat | |
| red_hat_ceph_storage_2:salt-minion salt-minion as a component of Red Hat Ceph Storage 2 | affected | no version stated vendor label: salt-minion | no fix planned | csaf_redhat | |
| https://github.com/saltstack/salt | affected | < c3d2c4eaaef3f26e58d2f676c7456987af866155 | vendor fix → c3d2c4eaaef3f26e58d2f676c7456987af866155 | osv | |
| https://github.com/saltstack/salt | affected | < b5b083fd2655e5082e57d70a03a0f8b850e32ee9 | vendor fix → b5b083fd2655e5082e57d70a03a0f8b850e32ee9 | osv | |
| https://github.com/saltstack/salt | affected | < 2765a4d2b9205ffd2af167882953f55ebf9f0214 | vendor fix → 2765a4d2b9205ffd2af167882953f55ebf9f0214 | osv | |
| https://github.com/saltstack/salt | affected | < 3c609c16ee0454217f339e987c03eaf61662a853 | vendor fix → 3c609c16ee0454217f339e987c03eaf61662a853 | osv | |
| https://github.com/saltstack/salt | affected | >= aaa6f7d80a61637353c9af1229d2754df52ee482, < e8309a6bbf12b8b803fdbd410e21b8b03d8b5264 | vendor fix → e8309a6bbf12b8b803fdbd410e21b8b03d8b5264 | osv | |
| https://github.com/saltstack/salt | affected | >= 11acecc43e2c2e4e9a0e73d76b46b035afe8d538, < 7d79ea784414fc73afc85086ce912fda83f3497d | vendor fix → 7d79ea784414fc73afc85086ce912fda83f3497d | osv | |
| https://github.com/saltstack/salt | affected | >= a04ab86da15215c01610183e60f4a2af6131f475, < 24c4ae9c2148a0f48e4f28c848a5011e18b57b7a | vendor fix → 24c4ae9c2148a0f48e4f28c848a5011e18b57b7a | osv | |
| https://github.com/saltstack/salt | affected | >= 11d176ff1b3c72a529a641c780de6bf70b792253, < 8cf08bd7be0110f965ca768b2e590f68e6b0a519 | vendor fix → 8cf08bd7be0110f965ca768b2e590f68e6b0a519 | osv | |
| https://github.com/saltstack/salt | affected | >= f44724cca5147595557cba04ff215ee31c35fe73, < 40f72db53e2b22e7ef88e1e150caedfdf10772f1 | vendor fix → 40f72db53e2b22e7ef88e1e150caedfdf10772f1 | osv | |
| https://github.com/saltstack/salt | affected | >= e5cd6086a75818885f2bd5bee3d7da3b2c07b110, < afc61ffe63770a731154f1380a91d566248a8fae | vendor fix → afc61ffe63770a731154f1380a91d566248a8fae | osv | |
| https://github.com/saltstack/salt | affected | >= d15dce349611a970fff8d3ffb462ef95ce7b2360, < 302776b03c38514667e2292ef3553b6442ee776d | vendor fix → 302776b03c38514667e2292ef3553b6442ee776d | osv | |
| https://github.com/saltstack/salt | affected | >= 19bb725698c1ead096a06749d99aad59266fbad8, < d520f9acc16ac5df744c08fe5153164876c1c9ee | vendor fix → d520f9acc16ac5df744c08fe5153164876c1c9ee | osv | |
| https://github.com/saltstack/salt | affected | >= 0ca04ffbebb9daeb8469a6e80d868b8a6524bd99, < 5da2de946d243b538926f4992a1ee9a9d865e62d | vendor fix → 5da2de946d243b538926f4992a1ee9a9d865e62d | osv | |
| https://github.com/saltstack/salt | affected | >= b95213ec903402f25c1e0aeb3990fe8452ab63ce, <= 998c382f5f2c3b4cbf7d96aa6913ada6993909b3 | none available | osv | |
| salt | affected | < 2015.8.13 | vendor fix → 2015.8.13 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 2016.3.0, < 2016.3.8 | vendor fix → 2016.3.8 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 2016.11.0, < 2016.11.10 | vendor fix → 2016.11.10 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 2017.5.0, < 2017.7.8 | vendor fix → 2017.7.8 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 2018.2.0, < 2018.3.5 | vendor fix → 2018.3.5 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 2019.2.0, < 2019.2.6 | vendor fix → 2019.2.6 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 3000.0, < 3000.4 | vendor fix → 3000.4 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 3001, < 3001.2 | vendor fix → 3001.2 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | >= 3002, < 3002.1 | vendor fix → 3002.1 | osv GHSA-qr38-h96j-2j3w | |
| salt | affected | < 2015.8.10 | vendor fix → 2015.8.10 | osv PYSEC-2020-104 | |
| salt | affected | >= 2015.8.11, < 2015.8.13 | vendor fix → 2015.8.13 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.3.0, < 2016.3.4 | vendor fix → 2016.3.4 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.3.5, < 2016.3.6 | vendor fix → 2016.3.6 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.3.7, < 2016.3.8 | vendor fix → 2016.3.8 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.11.0, < 2016.11.3 | vendor fix → 2016.11.3 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.11.4, < 2016.11.6 | vendor fix → 2016.11.6 | osv PYSEC-2020-104 | |
| salt | affected | >= 2016.11.7, < 2016.11.10 | vendor fix → 2016.11.10 | osv PYSEC-2020-104 | |
| salt | affected | >= 2017.7.0, < 2017.7.4 | vendor fix → 2017.7.4 | osv PYSEC-2020-104 | |
| salt | affected | >= 2017.7.5, < 2017.7.8 | vendor fix → 2017.7.8 | osv PYSEC-2020-104 | |
| salt | affected | >= 2018.3.0rc1, < 2018.3.5 | vendor fix → 2018.3.5 | osv PYSEC-2020-104 | |
| salt | affected | >= 2019.2.0, < 2019.2.5 | vendor fix → 2019.2.5 | osv PYSEC-2020-104 | |
| salt | affected | >= 3000, < 3000.3 | vendor fix → 3000.3 | osv PYSEC-2020-104 | |
| https://github.com/saltstack/salt | fixed | c3d2c4eaaef3f26e58d2f676c7456987af866155 | vendor fix → c3d2c4eaaef3f26e58d2f676c7456987af866155 | osv | |
| https://github.com/saltstack/salt | fixed | b5b083fd2655e5082e57d70a03a0f8b850e32ee9 | vendor fix → b5b083fd2655e5082e57d70a03a0f8b850e32ee9 | osv | |
| https://github.com/saltstack/salt | fixed | 2765a4d2b9205ffd2af167882953f55ebf9f0214 | vendor fix → 2765a4d2b9205ffd2af167882953f55ebf9f0214 | osv | |
| https://github.com/saltstack/salt | fixed | 3c609c16ee0454217f339e987c03eaf61662a853 | vendor fix → 3c609c16ee0454217f339e987c03eaf61662a853 | osv | |
| https://github.com/saltstack/salt | fixed | e8309a6bbf12b8b803fdbd410e21b8b03d8b5264 | vendor fix → e8309a6bbf12b8b803fdbd410e21b8b03d8b5264 | osv | |
| https://github.com/saltstack/salt | fixed | 7d79ea784414fc73afc85086ce912fda83f3497d | vendor fix → 7d79ea784414fc73afc85086ce912fda83f3497d | osv | |
| https://github.com/saltstack/salt | fixed | 24c4ae9c2148a0f48e4f28c848a5011e18b57b7a | vendor fix → 24c4ae9c2148a0f48e4f28c848a5011e18b57b7a | osv | |
| https://github.com/saltstack/salt | fixed | 8cf08bd7be0110f965ca768b2e590f68e6b0a519 | vendor fix → 8cf08bd7be0110f965ca768b2e590f68e6b0a519 | osv | |
| https://github.com/saltstack/salt | fixed | 40f72db53e2b22e7ef88e1e150caedfdf10772f1 | vendor fix → 40f72db53e2b22e7ef88e1e150caedfdf10772f1 | osv | |
| https://github.com/saltstack/salt | fixed | afc61ffe63770a731154f1380a91d566248a8fae | vendor fix → afc61ffe63770a731154f1380a91d566248a8fae | osv | |
| https://github.com/saltstack/salt | fixed | 302776b03c38514667e2292ef3553b6442ee776d | vendor fix → 302776b03c38514667e2292ef3553b6442ee776d | osv | |
| https://github.com/saltstack/salt | fixed | d520f9acc16ac5df744c08fe5153164876c1c9ee | vendor fix → d520f9acc16ac5df744c08fe5153164876c1c9ee | osv | |
| https://github.com/saltstack/salt | fixed | 5da2de946d243b538926f4992a1ee9a9d865e62d | vendor fix → 5da2de946d243b538926f4992a1ee9a9d865e62d | osv | |
| salt | fixed | 2019.2.6 | vendor fix → 2019.2.6 | osv GHSA-qr38-h96j-2j3w | |
| salt | fixed | 3000.4 | vendor fix → 3000.4 | osv GHSA-qr38-h96j-2j3w | |
| salt | fixed | 3001.2 | vendor fix → 3001.2 | osv GHSA-qr38-h96j-2j3w | |
| salt | fixed | 3002.1 | vendor fix → 3002.1 | osv GHSA-qr38-h96j-2j3w | |
| salt | fixed | 2015.8.10 | vendor fix → 2015.8.10 | osv PYSEC-2020-104 | |
| salt | fixed | 2015.8.13 | vendor fix → 2015.8.13 | osv PYSEC-2020-104 | |
| salt | fixed | 2016.3.4 | vendor fix → 2016.3.4 | osv PYSEC-2020-104 | |
| salt | fixed | 2016.3.6 | vendor fix → 2016.3.6 | osv PYSEC-2020-104 | |
| salt | fixed | 2016.3.8 | vendor fix → 2016.3.8 | osv PYSEC-2020-104 |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.