-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Jul 2020 11:03:10 +0200 Source: salt Binary: salt-common salt-master salt-minion salt-syndic salt-ssh salt-doc salt-cloud salt-api salt-proxy Architecture: source all Version: 2016.11.2+ds-1+deb9u5 Distribution: stretch-security Urgency: high Maintainer: Debian Salt Team <pkg-salt-team@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: salt-api - Generic, modular network access system salt-cloud - public cloud VM management system salt-common - shared libraries that salt requires for all packages salt-doc - additional documentation for salt, the distributed remote executi salt-master - remote manager to administer servers via salt salt-minion - client package for salt, the distributed remote execution system salt-proxy - Proxy client package for salt stack salt-ssh - remote manager to administer servers via Salt SSH salt-syndic - master-of-masters for salt, the distributed remote execution syst Changes: salt (2016.11.2+ds-1+deb9u5) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2018-15751 remote attackers are able to bypass authentication and execute arbitrary commands via salt-api(netapi) * CVE-2018-15750 remote attackers are able to determine which files exist on the server Checksums-Sha1: 978a31f9523d26f98f6ab580b19dbe01768ad16b 2911 salt_2016.11.2+ds-1+deb9u5.dsc 22ceeb790c472b20a520fc584f08b15431ffda8e 6096896 salt_2016.11.2+ds.orig.tar.xz fc9b0910c005107892b01c696278a37dfcba238f 38956 salt_2016.11.2+ds-1+deb9u5.debian.tar.xz 124de757133d9e187f2082bbe4b6d915b93f4909 24076 salt-api_2016.11.2+ds-1+deb9u5_all.deb 74029869cb1235af0fe018afdbc1fa3a05bfe96e 25588 salt-cloud_2016.11.2+ds-1+deb9u5_all.deb 518117ce9cda9584b48adfbb10efa18b38158e8e 4154308 salt-common_2016.11.2+ds-1+deb9u5_all.deb 164d3b85d29ceace2eb9ebbd53e955fd7711b9c2 4287580 salt-doc_2016.11.2+ds-1+deb9u5_all.deb 4a129e7f2e47791248636b51b81c9f8f5951d9f9 48258 salt-master_2016.11.2+ds-1+deb9u5_all.deb a83b77666faca5b67859af2186dd30d9cb7a3ab1 35576 salt-minion_2016.11.2+ds-1+deb9u5_all.deb 2b2b4d342920ffd7935f4ed710f91f4bfb87d10a 22888 salt-proxy_2016.11.2+ds-1+deb9u5_all.deb 16cf393f36982192d4611f5f9a2d58e23926902e 24126 salt-ssh_2016.11.2+ds-1+deb9u5_all.deb 8d1ab003371391ebed1f78377f40c86fbc6b3ae1 24402 salt-syndic_2016.11.2+ds-1+deb9u5_all.deb 27a33b021a12b72a16a43ede2c676df505ed7891 9943 salt_2016.11.2+ds-1+deb9u5_amd64.buildinfo Checksums-Sha256: b1f524f2f2aa37d9260d8b8a686bd4c8f3a6de318a8af7eb7006b307ee9b7c79 2911 salt_2016.11.2+ds-1+deb9u5.dsc d986b715e0bef20e797fe9fbe7b5d3d52e9528b941689a9c9487c6de0e7a0c28 6096896 salt_2016.11.2+ds.orig.tar.xz de4ba4b3fd6441018bbde9fa689ab57a52032f4aa5800fcccdd96daab2dbe5ef 38956 salt_2016.11.2+ds-1+deb9u5.debian.tar.xz caa00e1ba9382d86755858b1ff8ed567a0cac13b964e664db04d041f30f6793f 24076 salt-api_2016.11.2+ds-1+deb9u5_all.deb 1342bf66569edab06fa431c393db05f9866b3de133f79fa0b93a1665ba1063e5 25588 salt-cloud_2016.11.2+ds-1+deb9u5_all.deb 3720613717a4e50d58530f8c12fbd347c0ebb32675efa6e750a4c620ef9f0430 4154308 salt-common_2016.11.2+ds-1+deb9u5_all.deb bb1d7f7f7ce7c880bb3ab3c8081434cf6eda298aba00f8c6d66ef08c04b5d507 4287580 salt-doc_2016.11.2+ds-1+deb9u5_all.deb f73ccffb766a7d2a3a767fd4cc6ff98d78f1ce8761ffe42b37fec04eb7c9e2af 48258 salt-master_2016.11.2+ds-1+deb9u5_all.deb ef6d302041b83c4326eee5ad85a17e92b148aa2d50b2d31f2655f222e6a03798 35576 salt-minion_2016.11.2+ds-1+deb9u5_all.deb 55c71b76fe46ea6e19e501a6516cdfd891ffcc4ba3d5729bf544da70e0b46f50 22888 salt-proxy_2016.11.2+ds-1+deb9u5_all.deb 6155e2b24aaac26d4e36e0235a0294784d9d7ac279a4af836da6dd5ce720f8bc 24126 salt-ssh_2016.11.2+ds-1+deb9u5_all.deb 8fdc19fada3f8bd56eefa6739c9cc244bf288250c8073a3632a95b86942bf5b4 24402 salt-syndic_2016.11.2+ds-1+deb9u5_all.deb 96eb0ee8ed75915ffb10bcc1f03269fce335cc26943035057d679a126d4b0171 9943 salt_2016.11.2+ds-1+deb9u5_amd64.buildinfo Files: dbbf0392effee196490c3f481ae9cc6f 2911 admin extra salt_2016.11.2+ds-1+deb9u5.dsc ec60b35a21f25eed73e057b92cbef710 6096896 admin extra salt_2016.11.2+ds.orig.tar.xz c783440d8626d1da34046a963495fd21 38956 admin extra salt_2016.11.2+ds-1+deb9u5.debian.tar.xz 595fa45d9df34fd130dd5a7c24ae61ab 24076 admin extra salt-api_2016.11.2+ds-1+deb9u5_all.deb 2434167537edc49b7f9b16c88c1b4103 25588 admin extra salt-cloud_2016.11.2+ds-1+deb9u5_all.deb a487df008fee4ac77a087e8374d8d005 4154308 admin extra salt-common_2016.11.2+ds-1+deb9u5_all.deb e0bbe47fc6ea45cfabf895aae2dd4539 4287580 doc extra salt-doc_2016.11.2+ds-1+deb9u5_all.deb 589f151632082a8d9b56e1a9ec1d82bf 48258 admin extra salt-master_2016.11.2+ds-1+deb9u5_all.deb 6b6e5988aaaf87beb0d1c0f43ea7ec47 35576 admin extra salt-minion_2016.11.2+ds-1+deb9u5_all.deb 5faa8dd1b5606cdbd060e9cf49646ed4 22888 admin extra salt-proxy_2016.11.2+ds-1+deb9u5_all.deb 8d0779b397405c3f6c4844e53730ef26 24126 admin extra salt-ssh_2016.11.2+ds-1+deb9u5_all.deb 23716c2e920c560f6261857a197de43c 24402 admin extra salt-syndic_2016.11.2+ds-1+deb9u5_all.deb e4faa27401f21091e2c61c8c17c26074 9943 admin extra salt_2016.11.2+ds-1+deb9u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl8gMYRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR7k6D/9Kw35216WGzh15alSR5OUataC6zyQP z84GAW6/2+l1bfoLzyn6WMtuy2XtpmrC5te8MuYcEMmzuyoFLuTAsJBud8qsK3NJ mZwNl5PtBNwJNNF1r97tXolvKnO5hanW1qXdhE35y0oK1SXpEH3nge+vrEugeLeU Zv1J2roXzuK0E+HFAnArdwv0W7FRgPHQs2acDkBGhITxNbCykaHjpO3WIfSMzfc3 BQ2pFu/sdsMB6ZciDQUvLBCUz5GUMZct6HAzwb7whzZ6HK8AZBxdao3iqZvnLC0r eCvEJKMqr0fHxRPNVNGm7lyx8iOi0SqT3xzNfLeKpEYvDj167wIHgRCgDFZo3Rnx 9OJ0trMXKRrx9NbmeE/VX2eicveybAmwuxGJCwP4Z7Q2UwmCG+wnSZbaGdUFSx1l qMSoYl+92L5U1TSjvoZoTf59C7QfreD2HlI3Q/TuKM1I9Ri8y7k4ikUTBHV4gLEc DMHF0fQo9LG0x2GpmKXj9znR1EkHNQZHKcOL1V6gAAuV51x6rJUtYO4sNoTrgkUh l0UcLgalCTqW/8DJenoexTICkbDNUM53CDVDr1QsX4mYDlZA3IYmgDmEPf14fi7V l1SRNLBeYVw1RFtqn5JiyltiE8KGCnpAVyj8nXnN3uRwDrT1TcL1U9VaTII09opH k4EK3ab9VBDDYA== =jxu3 -----END PGP SIGNATURE-----
