salt/doc/topics/releases/2018.3.5.rst
Pedro Algarvio 6c819439b5 Add a few more nice to have hooks
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-07 07:10:13 +00:00

488 B

Salt 2018.3.5 Release Notes

Version 2018.3.5 is a CVE-fix release for 2018.3.0 <release-2018-3-0>.

Security Fix

CVE-2019-17361

With the Salt NetAPI enabled in addition to having a SSH roster defined, unauthenticated access is possible when specifying the client as SSH. Additionally, when the raw_shell option is specified any arbitrary command may be run on the Salt master when specifying SSH options.