Merge pull request #27986 from jacobhammons/dot6

Changed current release to 5.6 and added CVE to release notes
This commit is contained in:
Mike Place 2015-10-15 11:25:41 -06:00
commit efede904a7
2 changed files with 10 additions and 2 deletions

View file

@ -155,8 +155,8 @@ project = 'Salt'
copyright = '2015 SaltStack, Inc.'
version = salt.version.__version__
latest_release = '2015.8.0' # latest release
previous_release = '2015.5.5' # latest release from previous branch
latest_release = '2015.8.1' # latest release
previous_release = '2015.5.6' # latest release from previous branch
previous_release_dir = '2015.5' # path on web server for previous branch
build_type = 'previous' # latest, previous, develop, inactive

View file

@ -5,6 +5,14 @@ Salt 2015.5.6 Release Notes
Version 2015.5.6 is a bugfix release for :doc:`2015.5.0
</topics/releases/2015.5.0>`.
Security Fixes
--------------
CVE-2015-6941 - ``win_useradd`` module and ``salt-cloud`` display passwords in debug log
Updated the ``win_useradd`` module return data to no longer include the password of the newly created user. The password is now replaced with the string ``XXX-REDACTED-XXX``.
Updated the Salt Cloud debug output to no longer display ``win_password`` and ``sudo_password`` authentication credentials.
Changes for v2015.5.5..v2015.5.6
--------------------------------