—
PYSEC-2017-71
Details
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / salt
Introduced in:
0 Fixed in: c0689e32154c41f59840ae10ffc5fbfa30618710 Fix
pip install --upgrade 'salt>=c0689e32154c41f59840ae10ffc5fbfa30618710' References
- https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710 [FIX]
- https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html [WEB]
- https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html [WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=1273066 [REPORT]
- https://github.com/advisories/GHSA-cxm4-7qcw-267r [ADVISORY]