Ben Woods
537a0ae9dc
This is a security release, addressing the following CVE's:
- CVE-2018-15751 - Remote command execution and incorrect access control
when using salt-api.
- CVE-2018-15750 - Directory traversal vulnerability using salt-api.
Allows an attacker to determine what files exist on
a server when querying /run or /events.
Other changes this release:
https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
PR: 232663
Submitted by: Christer Edwards <christer.edwards@gmail.com>
Approved by: Christer Edwards (maintainer)
MFH: 2018Q4
Security: https://www.vuxml.org/freebsd/4f7c6af3-6a2c-4ead-8453-04e509688d45.html
4 lines
159 B
Plaintext
4 lines
159 B
Plaintext
TIMESTAMP = 1540613424
|
|
SHA256 (salt-2018.3.3.tar.gz) = dcf30d2e8eae105a72977c51cfc253fbc4dc28b2f71277fdce9d35de1eb63e15
|
|
SIZE (salt-2018.3.3.tar.gz) = 13953724
|