saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-16 09:40:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
salt/doc/topics/releases/2016.3.7.rst
Erik Johnson 93ee5ee2b0
Fix all Sphinx warnings 
Well, all but one, which we expect to see
2018-05-31 15:28:25 -05:00

890 B
Raw Blame History

Salt 2016.3.7 Release Notes

Version 2016.3.7 is a bugfix release for 2016.3.0 <release-2016-3-0>.

Security Fix

CVE-2017-12791 Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master

This release corrects a flaw in minion ID validation which could allow certain minions to authenticate to a master despite not having the correct credentials. To exploit the vulnerability, an attacker must create a salt-minion with an ID containing characters that will cause a directory traversal. Credit for discovering the security flaw goes to: Vernhk@qq.com

Changelog for v2016.3.6..v2016.3.7

Generated at: 2018-05-27 14:09:17 UTC

  • 11d176ff1b Add release notes for 2016.3.7 release
  • dc649ded51 Add clean_id function to salt.utils.verify.py