ALT-PU-2013-1179: package salt update to version 0.17.2-alt1
Описание
This update upgrades salt to version 0.17.2-alt1.
Устраненные уязвимости6
Связанные уязвимости
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated ...
Salt has insufficient argument validation in several modules
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.