Merge pull request #23888 from basepi/v2014.7.6release

Update the 2014.7.6 release notes with CVE details
This commit is contained in:
Colton Myers 2015-05-18 16:35:51 -06:00
commit a93e58f80f

View file

@ -2,7 +2,7 @@
Salt 2014.7.6 Release Notes
===========================
:release: TBA
:release: 2015-05-18
Version 2014.7.6 is a bugfix release for :doc:`2014.7.0
</topics/releases/2014.7.0>`.
@ -11,3 +11,11 @@ Changes:
- salt.runners.cloud.action() has changed the `fun` keyword argument to `func`.
Please update any calls to this function in the cloud runner.
This release is a security release. A minor issue was found, as cited below:
- CVE-2015-4017 -- Certificates are not verified when connecting to server in
the Aliyun and Proxmox modules
Only users of the Aliyun or Proxmox cloud modules are at risk. The
vulnerability does not exist in the latest 2015.5.0 release of Salt.