Skip to content

Commit e8fb2b4

Browse files
garethgreenawaygarethgreenaway
authored
Merge pull request saltstack#461 from barbaricyawps/docs_3002.9
Add 3002.9 changelog, release notes, man pages
2 parents 37d8bb7 + 2634bb9 commit e8fb2b4

21 files changed

+69
-23
lines changed

‎CHANGELOG.md

+17
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,23 @@ Versions are `MAJOR.PATCH`.
77

88
# Changelog
99

10+
Salt 3002.9 (2022-05-25)
11+
========================
12+
13+
Fixed
14+
-----
15+
16+
- Fixed an error when running on CentOS Stream 8. (#59161)
17+
- Fix bug in tcp transport (#61865)
18+
- Make sure the correct key is being used when verifying or validating communication, eg. when a Salt syndic is involved use syndic_master.pub and when a Salt minion is involved use minion_master.pub. (#61868)
19+
20+
21+
Security
22+
--------
23+
24+
- Fixed PAM auth to reject auth attempt if user account is locked. (cve-2022-22967)
25+
26+
1027
Salt 3002.8 (2022-02-25)
1128
========================
1229

‎changelog/59161.fixed

-1
This file was deleted.

‎changelog/61865.fixed

-1
This file was deleted.

‎changelog/61868.fixed

-1
This file was deleted.

‎changelog/cve-2022-22967.security

-1
This file was deleted.

‎doc/man/salt-api.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-API" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-API" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-api \- salt-api Command
66
.

‎doc/man/salt-call.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-CALL" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-CALL" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-call \- salt-call Documentation
66
.

‎doc/man/salt-cloud.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-CLOUD" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-CLOUD" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-cloud \- Salt Cloud Command
66
.

‎doc/man/salt-cp.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-CP" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-CP" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-cp \- salt-cp Documentation
66
.

‎doc/man/salt-key.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-KEY" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-KEY" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-key \- salt-key Documentation
66
.

‎doc/man/salt-master.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-MASTER" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-MASTER" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-master \- salt-master Documentation
66
.

‎doc/man/salt-minion.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-MINION" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-MINION" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-minion \- salt-minion Documentation
66
.

‎doc/man/salt-proxy.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-PROXY" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-PROXY" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-proxy \- salt-proxy Documentation
66
.

‎doc/man/salt-run.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-RUN" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-RUN" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-run \- salt-run Documentation
66
.

‎doc/man/salt-ssh.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-SSH" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-SSH" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-ssh \- salt-ssh Documentation
66
.

‎doc/man/salt-syndic.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-SYNDIC" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-SYNDIC" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-syndic \- salt-syndic Documentation
66
.

‎doc/man/salt-unity.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT-UNITY" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT-UNITY" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt-unity \- salt-unity Command
66
.

‎doc/man/salt.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt \- salt
66
.

‎doc/man/salt.7

+17-5
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SALT" "7" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SALT" "7" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
salt \- Salt Documentation
66
.
@@ -88125,7 +88125,7 @@ beacons:
8812588125
.B salt.beacons.adb.validate(config)
8812688126
Validate the beacon configuration
8812788127
.UNINDENT
88128-
.SS salt.beacons.aix_account module
88128+
.SS salt.beacons.aix_account
8812988129
.sp
8813088130
Beacon to fire event when we notice a AIX user is locked due to many failed login attempts.
8813188131
.sp
@@ -191337,7 +191337,7 @@ Passes through all the parameters described in the
191337191337
\fI\%utils.http.query function\fP:
191338191338
.INDENT 7.0
191339191339
.TP
191340-
.B salt.utils.http.query(url, method=\(aqGET\(aq, params=None, data=None, data_file=None, header_dict=None, header_list=None, header_file=None, username=None, password=None, auth=None, decode=False, decode_type=\(aqauto\(aq, status=False, headers=False, text=False, cookies=None, cookie_jar=None, cookie_format=\(aqlwp\(aq, persist_session=False, session_cookie_jar=None, data_render=False, data_renderer=None, header_render=False, header_renderer=None, template_dict=None, test=False, test_url=None, node=\(aqminion\(aq, port=80, opts=None, backend=None, ca_bundle=None, verify_ssl=None, cert=None, text_out=None, headers_out=None, decode_out=None, stream=False, streaming_callback=None, header_callback=None, handle=False, agent=\(aqSalt/3002.8\(aq, hide_fields=None, raise_error=True, formdata=False, formdata_fieldname=None, formdata_filename=None, decode_body=True, **kwargs)
191340+
.B salt.utils.http.query(url, method=\(aqGET\(aq, params=None, data=None, data_file=None, header_dict=None, header_list=None, header_file=None, username=None, password=None, auth=None, decode=False, decode_type=\(aqauto\(aq, status=False, headers=False, text=False, cookies=None, cookie_jar=None, cookie_format=\(aqlwp\(aq, persist_session=False, session_cookie_jar=None, data_render=False, data_renderer=None, header_render=False, header_renderer=None, template_dict=None, test=False, test_url=None, node=\(aqminion\(aq, port=80, opts=None, backend=None, ca_bundle=None, verify_ssl=None, cert=None, text_out=None, headers_out=None, decode_out=None, stream=False, streaming_callback=None, header_callback=None, handle=False, agent=\(aqSalt/3002.9\(aq, hide_fields=None, raise_error=True, formdata=False, formdata_fieldname=None, formdata_filename=None, decode_body=True, **kwargs)
191341191341
Query a resource, and decode the return data
191342191342
.UNINDENT
191343191343
.INDENT 7.0
@@ -328643,8 +328643,8 @@ Alternate constructor that accept multiple recipients and rooms
328643328643
.B filter(record)
328644328644
Determine if the specified record is to be logged.
328645328645
.sp
328646-
Returns True if the record should be logged, or False otherwise.
328647-
If deemed appropriate, the record may be modified in\-place.
328646+
Is the specified record to be logged? Returns 0 for no, nonzero for
328647+
yes. If deemed appropriate, the record may be modified in\-place.
328648328648
.UNINDENT
328649328649
.UNINDENT
328650328650
.INDENT 0.0
@@ -455301,6 +455301,18 @@ Ensure that sourced file is cached using its hash name (cve\-2021\-21996)
455301455301
.SS Salt 3002.8 (2022\-02\-25)
455302455302
.sp
455303455303
Version 3002.8 is a CVE security fix release for 3002\&.
455304+
.SS Important notice about upgrading
455305+
.sp
455306+
Version 3002.8 is a security release. 3002.8 minions are not able to
455307+
communicate with masters older than 3002.8. You must upgrade your masters
455308+
before upgrading minions.
455309+
.SS Minion authentication security
455310+
.sp
455311+
Authentication between masters and minions rely on public/private key
455312+
encryption and message signing. To secure minion authentication before you must
455313+
pre\-seed the master\(aqs public key on minions. To pre\-seed the minions\(aq master
455314+
key, place a copy of the master\(aqs public key in the minion\(aqs pki directory as
455315+
\fBminion_master.pub\fP\&.
455304455316
.SS Security
455305455317
.INDENT 0.0
455306455318
.IP \(bu 2

‎doc/man/spm.1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
.\" Man page generated from reStructuredText.
22
.
3-
.TH "SPM" "1" "Feb 25, 2022" "3002.8" "Salt"
3+
.TH "SPM" "1" "May 25, 2022" "3002.9" "Salt"
44
.SH NAME
55
spm \- Salt Package Manager Command
66
.

‎doc/topics/releases/3002.9.rst

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
.. _release-3002-9:
2+
3+
4+
========================
5+
Salt 3002.9 (2022-05-25)
6+
========================
7+
8+
Version 3002.9 is a CVE security fix release for :ref:`3002 <release-3002>`.
9+
10+
Fixed
11+
-----
12+
13+
- Fixed an error when running on CentOS Stream 8. (#59161)
14+
- Fix bug in tcp transport (#61865)
15+
- Make sure the correct key is being used when verifying or validating communication, eg. when a Salt syndic is involved use syndic_master.pub and when a Salt minion is involved use minion_master.pub. (#61868)
16+
17+
18+
Security
19+
--------
20+
21+
- Fixed PAM auth to reject auth attempt if user account is locked. (cve-2022-22967)

0 commit comments

Comments
 (0)