Register | Log in

salt

Choose email to subscribe with

general

source: salt (main)
version: 3002.2+dfsg1-1
maintainer: Debian Salt Team (archive) (DMD)
uploaders: Andriy Senkovych [DMD] – Joe Healy [DMD] – Franklin G Mendoza [DMD] – Ondřej Nový [DMD] – Benjamin Drung [DMD]
arch: all
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2014.1.13+ds-3
o-o-sec: 2014.1.13+ds-3+deb8u1
oldstable: 2016.11.2+ds-1+deb9u4
old-sec: 2016.11.2+ds-1+deb9u6
stable: 2018.3.4+dfsg1-6+deb10u1
stable-sec: 2018.3.4+dfsg1-6+deb10u1
testing: 3002.2+dfsg1-1
unstable: 3002.2+dfsg1-1

versioned links

2014.1.13+ds-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2014.1.13+ds-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2016.11.2+ds-1+deb9u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2016.11.2+ds-1+deb9u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2018.3.4+dfsg1-6+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3002.2+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

salt-api (2 bugs: 0, 2, 0, 0)
salt-cloud
salt-common
salt-doc
salt-master (1 bugs: 0, 1, 0, 0)
salt-minion (1 bugs: 0, 0, 1, 0)
salt-proxy
salt-ssh (2 bugs: 0, 2, 0, 0)
salt-syndic

action needed

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2020-16846: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
CVE-2020-17490: The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
CVE-2020-25592: In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

Please fix them.

Created: 2020-11-05 Last update: 2020-12-04 21:05

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2017-7893: In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

Please fix it.

Created: 2017-04-26 Last update: 2020-12-04 21:05

news

[2020-12-04] Accepted salt 2016.11.2+ds-1+deb9u6 (source) into oldstable (Abhijith PA)
[2020-11-26] salt 3002.2+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-11-23] Accepted salt 3002.2+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-11-12] salt 3002.1+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-11-09] Accepted salt 3002.1+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-10-28] salt 3002+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-10-26] Accepted salt 3002+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-10-26] salt 3001.1+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2020-10-22] Accepted salt 3001.1+dfsg1-2 (source) into unstable (Benjamin Drung)
[2020-10-09] Accepted salt 3001.1+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-07-28] Accepted salt 2016.11.2+ds-1+deb9u5 (source all) into oldstable (Thorsten Alteholz)
[2020-07-16] salt 3001+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2020-07-14] Accepted salt 3001+dfsg1-2 (source) into unstable (Benjamin Drung)
[2020-06-23] Accepted salt 3001+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-05-29] Accepted salt 2014.1.13+ds-3+deb8u1 (source all) into oldoldstable (Abhijith PA)
[2020-05-09] Accepted salt 2016.11.2+ds-1+deb9u4 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-09] Accepted salt 2016.11.2+ds-1+deb9u3 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-09] Accepted salt 2018.3.4+dfsg1-6+deb10u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-07] Accepted salt 2016.11.2+ds-1+deb9u4 (source) into oldstable->embargoed, oldstable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-06] Accepted salt 2016.11.2+ds-1+deb9u3 (source) into oldstable->embargoed, oldstable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-06] Accepted salt 2018.3.4+dfsg1-6+deb10u1 (source) into stable->embargoed, stable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-02] salt 3000.2+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-04-30] Accepted salt 3000.2+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-04-25] salt 3000.1+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-04-09] Accepted salt 3000.1+dfsg1-1 (source) into unstable (Benjamin Drung)
[2020-04-06] salt 3000+dfsg1-4 MIGRATED to testing (Debian testing watch)
[2020-03-30] Accepted salt 3000+dfsg1-4 (source) into unstable (Benjamin Drung)
[2020-03-10] salt 3000+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2020-03-03] Accepted salt 3000+dfsg1-3 (source) into unstable (Benjamin Drung)
[2020-03-02] Accepted salt 3000+dfsg1-2 (source) into unstable (Benjamin Drung)

1
2

bugs [bug history graph]

all: 6
RC: 0
I&N: 5
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3002.2+dfsg1-1
10 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing