svn commit: r483114 - head/sysutils/py-salt
Ben Woods
woodsb02 at FreeBSD.org
Sat Oct 27 08:07:38 UTC 2018
Author: woodsb02
Date: Sat Oct 27 08:07:37 2018
New Revision: 483114
URL: https://svnweb.freebsd.org/changeset/ports/483114
Log:
sysutils/py-salt: Update to 2018.3.3
This is a security release, addressing the following CVE's:
- CVE-2018-15751 - Remote command execution and incorrect access control
when using salt-api.
- CVE-2018-15750 - Directory traversal vulnerability using salt-api.
Allows an attacker to determine what files exist on
a server when querying /run or /events.
Other changes this release:
https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
PR: 232663
Submitted by: Christer Edwards <christer.edwards at gmail.com>
Approved by: Christer Edwards (maintainer)
MFH: 2018Q4
Security: https://www.vuxml.org/freebsd/4f7c6af3-6a2c-4ead-8453-04e509688d45.html
Modified:
head/sysutils/py-salt/Makefile
head/sysutils/py-salt/distinfo
Modified: head/sysutils/py-salt/Makefile
==============================================================================
--- head/sysutils/py-salt/Makefile Sat Oct 27 08:06:03 2018 (r483113)
+++ head/sysutils/py-salt/Makefile Sat Oct 27 08:07:37 2018 (r483114)
@@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= salt
-PORTVERSION= 2018.3.2
+PORTVERSION= 2018.3.3
CATEGORIES= sysutils python
MASTER_SITES= CHEESESHOP
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
Modified: head/sysutils/py-salt/distinfo
==============================================================================
--- head/sysutils/py-salt/distinfo Sat Oct 27 08:06:03 2018 (r483113)
+++ head/sysutils/py-salt/distinfo Sat Oct 27 08:07:37 2018 (r483114)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1534903119
-SHA256 (salt-2018.3.2.tar.gz) = d86eeea2e5387f4a64bbf0a11d103bfc8aac1122e19d39cc0945d33efdc797bd
-SIZE (salt-2018.3.2.tar.gz) = 12996445
+TIMESTAMP = 1540613424
+SHA256 (salt-2018.3.3.tar.gz) = dcf30d2e8eae105a72977c51cfc253fbc4dc28b2f71277fdce9d35de1eb63e15
+SIZE (salt-2018.3.3.tar.gz) = 13953724
More information about the svn-ports-all
mailing list