—
PYSEC-2017-71
Quick fix
PYSEC-2017-71 — salt: upgrade to the fixed version with the command below.
pip install --upgrade 'salt>=c0689e32154c41f59840ae10ffc5fbfa30618710'Details
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/salt
Introduced in:
0Fixed in: c0689e32154c41f59840ae10ffc5fbfa30618710Fix
pip install --upgrade 'salt>=c0689e32154c41f59840ae10ffc5fbfa30618710'References
- https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710[FIX]
- https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html[WEB]
- https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=1273066[REPORT]
- https://github.com/advisories/GHSA-cxm4-7qcw-267r[ADVISORY]