[Pkg-salt-team] Bug#959684: [CVEHelp at saltstack.com] Action Required: SaltStack CVE Follow-Up Patch

[Elimar Riesebieter]

Hi Salvatore and others,

* Salvatore Bonaccorso <carnil at debian.org> [2020-05-06 13:09 +0200]:

> Hi Elimar,
> 
> On Wed, May 06, 2020 at 10:36:42AM +0200, Elimar Riesebieter wrote:
> > Hi all,
> > 
> > please notice the attached note from saltstack! I assume this is not
> > integrated into DSA 4676-1, isn't it?
> 
> Yes this is right, those parts were missing. 
> 
> Do you have possibility to test updated salt packages for stretch?

we fired up your kindly provided deb9u4 packages and run the
verification script http://em.saltstack.com/F1sH900oN0P0M17U000Qhf7
with the following result:

CVE-2020-11651 - OK
CVE-2020-11652 - OK

Thanks for cooperation
Elimar
-- 
  Never make anything simple and efficient when a way
  can be found to make it complex and wonderful ;-)