mirror of
https://github.com/valitydev/salt.git
synced 2024-11-07 17:09:03 +00:00
16 lines
702 B
ReStructuredText
16 lines
702 B
ReStructuredText
===========================
|
|
Salt 2016.3.8 Release Notes
|
|
===========================
|
|
|
|
Version 2016.3.8 is a bugfix release for :ref:`2016.3.0 <release-2016-3-0>`.
|
|
|
|
Changes for v2016.3.7..v2016.3.8
|
|
--------------------------------
|
|
|
|
Security Fix
|
|
============
|
|
|
|
CVE-2017-14695 Directory traversal vulnerability in minion id validation in SaltStack. Allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. Credit for discovering the security flaw goes to: Julian Brost (julian@0x4a42.net)
|
|
|
|
CVE-2017-14696 Remote Denial of Service with a specially crafted authentication request. Credit for discovering the security flaw goes to: Julian Brost (julian@0x4a42.net)
|