PYSEC-2017-31

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2016-9639 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2016-9639 Source advisory: OSV:PYSEC-2017-34...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2016-3176 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2016-3176 Source advisory: OSV:PYSEC-2017-33...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2015-8034 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2015-8034 Source advisory: OSV:PYSEC-2017-32...