FEDORA-2016-105b3b8804 — security update for salt

stable

salt-2015.5.8-1.fc23

FEDORA-2016-105b3b8804 created by terminalmage 8 years ago for Fedora 23

Update to bugfix release 2015.5.8

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-105b3b8804

This update has been submitted for testing by terminalmage.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by terminalmage.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

salt-2015.5.8-1.fc23

BZ#1212784 CVE-2015-1838 salt: insecure /tmp file handling in salt/modules/serverdensity_device.py

BZ#1212788 CVE-2015-1839 salt: insecure /tmp file handling in salt/modules/chef.py

BZ#1257155 salt: git module leaks authentication details into log [fedora-all]

BZ#1273068 CVE-2015-6941 salt: win_useradd module and salt-cloud display passwords in debug log [fedora-all]

BZ#1273069 CVE-2015-6941 salt-cloud: salt: win_useradd module and salt-cloud display passwords in debug log [fedora-all]

BZ#1277628 Urgent bug fix back-ported to salt 2015.5.5 (same version as EPEL) by upstream not yet made it into EPEL.

BZ#1289110 CVE-2015-8034 salt: Information leak from state.sls cache data stored as world-readable [fedora-all]

salt-2015.5.8-1.fc23

Automated Test Results

None