Package: salt Severity: grave Tags: security Justification: user security hole This was posted to oss-security. Since it's now more or less public, you should contact upstream to check the patch status: http://seclists.org/oss-sec/2013/q4/113 http://seclists.org/oss-sec/2013/q4/114 Cheers, Moritz