saltstack/salt

View on GitHub
doc/topics/releases/2014.1.10.rst

Summary

Maintainability
Test Coverage
============================
Salt 2014.1.10 Release Notes
============================

:release: 2014-08-01

.. note::

    Version 2014.1.9 contained a regression which caused inaccurate Salt version
    detection, and thus was never packaged for general release.  This version
    contains the version detection fix, but is otherwise identical to 2014.1.9.

Version 2014.1.10 is another bugfix release for :ref:`2014.1.0
<release-2014-1-0>`.  Changes include:

- Ensure salt-ssh will not continue if permissions on a temporary directory are
  not correct.
- Use the bootstrap script distributed with Salt instead of relying on an
  external resource
- Remove unused testing code
- Ensure salt states are placed into the ``.salt`` directory in salt-ssh
- Use a randomized path for temporary files in a salt-cloud deployment
- Clean any stale directories to ensure a fresh copy of salt-ssh during a
  deployment

Salt 2014.1.10 fixes security issues documented by CVE-2014-3563: "Insecure
tmp-file creation in seed.py, salt-ssh, and salt-cloud." Upgrading is
recommended.