[Pkg-salt-team] Next salt upload

Julien Cristau julien.cristau at logilab.fr
Mon Oct 21 07:54:59 UTC 2013


Hi Joe,

On Sat, Oct 19, 2013 at 19:00:57 +1100, Joe Healy wrote:

> Hi,
> 
> I have been a little unsure about the next step to take with uploading
> salt.
> 
> The situation at the moment is:
> 
> 1) There are 2 recent RC bugs:
> 
>  a) due to me missing new files added by upstream with different
>     copyright and licences [1]
> 
>  b) due to some security issues identified with CVE numbers assigned
>     [2]
> 
> 2) Upstream have released 0.17.1 to pypi, which supposedly contains
>    some security fixes. I am not clear on the relationship between the
>    security issues fixed and the assigned CVE numbers.
> 
http://docs.saltstack.com/topics/releases/0.17.1.html has the mapping
between patches and CVEs.  Most seem to be salt-ssh issues, so don't
affect 0.16.4.

Cheers,
Julien
-- 
Julien Cristau          <julien.cristau at logilab.fr>
Logilab		        http://www.logilab.fr/
Informatique scientifique & gestion de connaissances



More information about the pkg-salt-team mailing list