valitydev/salt
14
0
Fork 0
mirror of https://github.com/valitydev/salt.git synced 2024-11-06 16:45:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add 2016.11.10 release notes to 2018.3 branch

Browse Source
This commit is contained in:
Ch3LL 2018-10-24 11:08:38 -04:00
parent 1e3415860f
commit 896caa120f
No known key found for this signature in database
GPG Key ID: 132B55A7C13EFA73
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
doc/topics/releases/2016.11.10.rst Normal file
View File

@ -0,0 +1,15 @@
=============================
Salt 2016.11.10 Release Notes
=============================
Version 2016.11.10 is a security release for :ref:`2016.11.0 <release-2016-11-0>`.
Changes for v2016.11.9..v2016.11.10
-----------------------------------
Security Fix
============
CVE-2018-15751 Remote command execution and incorrect access control when using salt-api.
CVE-2018-15750 Directory traversal vulnerability when using salt-api. Allows an attacker to determine what files exist on a server when querying /run or /events.