Bug 546904 – <app-admin/salt-2014.7.4: insecure /tmp file handling

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2015-04-17 10:38:03 UTC]

From https://bugzilla.redhat.com/show_bug.cgi?id=1212784:

Michael Scherer of Red Hat reported an insecure /tmp file handling in 
salt/modules/serverdensity_device.py in SaltStack.
This issue is fixed in SaltStack version 2014.7.4 with this commit:

https://github.com/saltstack/salt/commit/e11298d7155e9982749483ca5538e46090caef9c

External References:

http://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html



From https://bugzilla.redhat.com/show_bug.cgi?id=1212788:

Michael Scherer of Red Hat reported an insecure /tmp file handling in salt/modules/chef.py in SaltStack.
This issue is fixed in SaltStack version 2014.7.4 with these commits:

https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c
https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81

External References:

http://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html


@maintainer(s): since the fixed version is already in the tree, please remove the affected versions.

[Comment 1 Patrick McLean 2015-04-17 22:19:54 UTC]

Old 2014.7 versions removed, and 2014.1.3 has been unkeyworded.

[Comment 2 Yury German 2015-04-18 23:20:27 UTC]

Maintainer(s), Thank you for you for cleanup.

No stable versions, closing as noglsa.