Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 635
Alerts This Week
Warning Icon 1 635

Fedora 22 Security Advisory: Salt Critical Update for Information Leak

fedora
Calendar Grey February 5, 2016
Dist Fedora Esm H88
The salt package in Fedora 22 has been updated with crucial patches to tackle recent vulnerabilities and improve overall efficiency.
Updated dnf patch ---- Update to bugfix release 2015.5.9, patched with proper dnf support

Summary

Salt is a distributed remote execution system used to execute commands and

query data. It was developed in order to bring the best solutions found in

the world of remote execution together and make them better, faster and more

malleable. Salt accomplishes this via its ability to handle larger loads of

information, and not just dozens, but hundreds or even thousands of individual

servers, handle them quickly and through a simple and manageable interface.

Update Information:

Updated dnf patch ---- Update to bugfix release 2015.5.9, patched with proper dnf support

Change Log

References


[ 1 ] Bug #1289109 - CVE-2015-8034 salt: Information leak from state.sls cache data stored as world-readable https://bugzilla.redhat.com/show_bug.cgi?id=1289109

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update salt' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: salt
Product: Fedora 22
Version: 2015.5.9
Release: 2.fc22
Summary: A parallel remote execution system

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.