Skip to content

Commit

Permalink
Update 3000.6 release
Browse files Browse the repository at this point in the history
  • Loading branch information
@dwoz
Frode Gundersen authored and dwoz committed Dec 1, 2020
1 parent 9b158ba commit 6cab366
Show file tree
Hide file tree
Showing 20 changed files with 65 additions and 16 deletions.
8 changes: 8 additions & 0 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,14 @@ This changelog follows [keepachangelog](https://keepachangelog.com/en/1.0.0/) fo
This project versioning is _similar_ to [Semantic Versioning](https://semver.org), and is documented in [SEP 14](https://github.com/saltstack/salt-enhancement-proposals/pull/20/files).
Versions are `MAJOR.PATCH`.

Salt 3000.6 (2020-12-01)
========================

Fixed
-----

- Fixes salt-ssh authentication when using tty (#58922)

Salt 3000.5 (2020-09-16)
========================

Expand Down
1 change: 0 additions & 1 deletion changelog/58922.fixed
View file

This file was deleted.

2 changes: 1 addition & 1 deletion doc/man/salt-api.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-API" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-API" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-api \- salt-api Command
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-call.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CALL" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-CALL" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-call \- salt-call Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-cloud.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CLOUD" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-CLOUD" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-cloud \- Salt Cloud Command
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-cp.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-CP" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-CP" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-cp \- salt-cp Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-key.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-KEY" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-KEY" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-key \- salt-key Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-master.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-MASTER" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-MASTER" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-master \- salt-master Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-minion.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-MINION" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-MINION" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-minion \- salt-minion Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-proxy.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-PROXY" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-PROXY" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-proxy \- salt-proxy Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-run.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-RUN" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-RUN" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-run \- salt-run Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-ssh.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-SSH" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-SSH" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-ssh \- salt-ssh Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-syndic.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-SYNDIC" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-SYNDIC" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-syndic \- salt-syndic Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt-unity.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT-UNITY" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT-UNITY" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt-unity \- salt-unity Command
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt \- salt
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/salt.7
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SALT" "7" "Sep 16, 2020" "3000.5" "Salt"
.TH "SALT" "7" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
salt \- Salt Documentation
.
Expand Down
2 changes: 1 addition & 1 deletion doc/man/spm.1
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.\" Man page generated from reStructuredText.
.
.TH "SPM" "1" "Sep 16, 2020" "3000.5" "Salt"
.TH "SPM" "1" "Dec 01, 2020" "3000.6" "Salt"
.SH NAME
spm \- Salt Package Manager Command
.
Expand Down
15 changes: 15 additions & 0 deletions doc/topics/releases/2019.2.7.rst
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
.. _release-2019-2-7:

===========================
Salt 2019.2.7 Release Notes
===========================

Version 2019.2.7 is a CVE fix release for :ref:`2019.2.0 <release-2019-2-0>`.

Fixed
-----

- Properly validate eauth credentials and tokens along with their ACLs.
Prior to this change eauth was not properly validated when calling
Salt ssh via the salt-api. Any value for 'eauth' or 'token' would allow a user
to bypass authentication and make calls to Salt ssh. (CVE-2020-25592)
12 changes: 12 additions & 0 deletions doc/topics/releases/2019.2.8.rst
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
.. _release-2019-2-8:

===========================
Salt 2019.2.8 Release Notes
===========================

Version 2019.2.8 is a bugfix release for :ref:`2019.2.0 <release-2019-2-0>`.

Fixed
-----

- Fixes salt-ssh authentication when using tty (#58922)
15 changes: 15 additions & 0 deletions doc/topics/releases/3000.6.rst
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
.. _release-3000-5:

===========================
Salt 3000.5 Release Notes
===========================

Version 3000.5 is a CVE fix release for :ref:`3000 <release-3000>`.

Fixed
-----

- CVE-2020-16804 - Properly validate eauth credentials and tokens along with
their ACLs. Prior to this change eauth was not properly validated when calling
Salt ssh via the salt-api. Any value for 'eauth' or 'token' would allow a user
to bypass authentication and make calls to Salt ssh. (CVE-2020-25592)

0 comments on commit 6cab366

Please sign in to comment.