1.. _release-3001-8:
2
3========================
4Salt 3001.8 (2021-08-20)
5========================
6
7Version 3001.8 is a CVE security fix release for :ref:`3001 <release-3001>`.
8
9
10Fixed
11-----
12
13- Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)
14
15
16Security
17--------
18
19- Fix the CVE-2021-31607 vulnerability
20  Additionally, an audit and a tool was put in place, ``bandit``, to address similar issues througout the code base, and prevent them. (CVE-2021-31607)
21- Ensure that sourced file is cached using its hash name (cve-2021-21996)
22