salt/doc/topics/releases/2015.5.6.rst
Erik Johnson 93ee5ee2b0
Fix all Sphinx warnings
Well, all but one, which we expect to see
2018-05-31 15:28:25 -05:00

72 KiB

Salt 2015.5.6 Release Notes

release
2015-10-13

Version 2015.5.6 is a bugfix release for 2015.5.0 <release-2015-5-0>.

Statistics

Security Fixes

CVE-2015-6941 The Windows user <salt.modules.win_useradd> module and salt-cloud display passwords in log when log level is set to debug or more verbose.

For the Windows user <salt.modules.win_useradd> module, the password is now replaced with the string XXX-REDACTED-XXX.

For salt-cloud, debug logging no longer displays win_password and sudo_password authentication credentials.

CVE-2015-6918 Git state/execution modules log HTTPS auth credentials when log level is set to debug or more verbose.

These credentials are now replaced with REDACTED in the debug output. Thanks to Andreas Stieger <asteiger@suse.com> for bringing this to our attention.

Changelog for v2015.5.5..v2015.5.6

Generated at: 2018-05-27 22:13:00 UTC