saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-16 09:40:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
salt/doc/topics/releases/2015.5.6.rst
Benjamin Drung ae899aee64 Fix various spelling mistakes in release notes 
There are various spelling mistakes in the git commit messages in the
release notes.

Fix those spelling mistakes. Since each commit is either referenced by
the commit has or pull request, fixing those spelling mistakes has no
negative effect on finding those commit.

Signed-off-by: Benjamin Drung <benjamin.drung@ionos.com>
2022-03-16 16:45:52 -04:00

72 KiB
Raw Blame History

Salt 2015.5.6 Release Notes

release
2015-10-13

Version 2015.5.6 is a bugfix release for 2015.5.0 <release-2015-5-0>.

Statistics

Security Fixes

CVE-2015-6941 The Windows user <salt.modules.win_useradd> module and salt-cloud display passwords in log when log level is set to debug or more verbose.

For the Windows user <salt.modules.win_useradd> module, the password is now replaced with the string XXX-REDACTED-XXX.

For salt-cloud, debug logging no longer displays win_password and sudo_password authentication credentials.

CVE-2015-6918 Git state/execution modules log HTTPS auth credentials when log level is set to debug or more verbose.

These credentials are now replaced with REDACTED in the debug output. Thanks to Andreas Stieger <asteiger@suse.com> for bringing this to our attention.

Changelog for v2015.5.5..v2015.5.6

Generated at: 2018-05-27 22:13:00 UTC