These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.

# Salt 2019.2.6 Release Notes

Version 2019.2.6 is a CVE fix release for 2019.2.0.

## Fixed

- Prevent shell injections in netapi ssh client (cve-2020-16846)

- Prevent creating world readable private keys with the tls execution module. (cve-2020-17490)