saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-16 09:40:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
salt/doc/topics/releases/3005.5.rst
Pedro Algarvio ede09ef43e
Fix pre-commit
2024-01-31 21:12:34 +00:00

538 B
Raw Blame History

Salt 3005.5 Release Notes

Version 3005.5 is a CVE security fix release for 3005 <release-3005>.

Security

  • Fix CVE-2024-22231 by preventing directory traversal when creating syndic cache directory on the master.
  • Fix CVE-2024-22232 Prevent directory traversal attacks in the master's serve_file method.

These vulnerablities were discovered and reported by: Yudi Zhao(Huawei Nebula Security Lab),Chenwei Jiang(Huawei Nebula Security Lab) (#565)