These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.

# Salt 3001.8 (2021-08-20)

Version 3001.8 is a CVE security fix release for 3001.

## Fixed

- Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)

## Security

- Fix the CVE-2021-31607 vulnerability Additionally, an audit and a tool was put in place, `bandit`, to address similar issues througout the code base, and prevent them. (CVE-2021-31607)

- Ensure that sourced file is cached using its hash name (cve-2021-21996)