Merge pull request #245 from garethgreenaway/docs_3003.3

docs_3003.3
saltstack · Aug 24, 2021 · b30ccda · b30ccda
2 parents caf3325 + 0066fe5
commit b30ccda
Show file tree

Hide file tree

Showing 22 changed files with 237 additions and 80 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,22 @@ Versions are `MAJOR.PATCH`.
 
 # Changelog
 
+Salt 3003.3 (2021-08-20)
+========================
+
+Fixed
+-----
+
+- Fix issue introduced in https://github.com/saltstack/salt/pull/59648 (#60046)
+
+
+Security
+--------
+
+- Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)
+- Ensure that sourced file is cached using its hash name (cve-2021-21996)
+
+
 Salt 3003.2 (2021-07-29)
 ========================
 
@@ -205,6 +221,21 @@ Added
   metadata for a package by extracting library requirement information from the
   binary ELF files in the package. (#59569)
 
+Salt 3002.7 (2021-08-20)
+========================
+
+Fixed
+-----
+
+- Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)
+
+
+Security
+--------
+
+- Fix the CVE-2021-31607 vulnerability
+  Additionally, an audit and a tool was put in place, ``bandit``, to address similar issues througout the code base, and prevent them. (CVE-2021-31607)
+- Ensure that sourced file is cached using its hash name (cve-2021-21996)
 
 Salt 3002.6 (2021-03-10)
 ========================
@@ -535,6 +566,25 @@ Added
   This flag will be deprecated in the Phosphorus release when this functionality
   becomes the default. (#58652)
 
+Salt 3001.8 (2021-08-20)
+========================
+
+Version 3001.8 is a bug fix release for :ref:`3001 <release-3001>`.
+
+
+Fixed
+-----
+
+- Verify the owner of an existing config before trusting it during install. If the owner cannot be verified, back it up and use defaults. (CVE-2021-22004)
+
+
+Security
+--------
+
+- Fix the CVE-2021-31607 vulnerability
+  Additionally, an audit and a tool was put in place, ``bandit``, to address similar issues througout the code base, and prevent them. (CVE-2021-31607)
+- Ensure that sourced file is cached using its hash name (cve-2021-21996)
+
 Salt 3001.7 (2021-03-10)
 ========================
 

diff --git a/changelog/60046.fixed b/changelog/60046.fixed
diff --git a/changelog/CVE-2021-22004.security b/changelog/CVE-2021-22004.security
diff --git a/changelog/cve-2021-21996.security b/changelog/cve-2021-21996.security
diff --git a/doc/man/salt-api.1 b/doc/man/salt-api.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-API" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-API" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-api \- salt-api Command
 .

diff --git a/doc/man/salt-call.1 b/doc/man/salt-call.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-CALL" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-CALL" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-call \- salt-call Documentation
 .

diff --git a/doc/man/salt-cloud.1 b/doc/man/salt-cloud.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-CLOUD" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-CLOUD" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-cloud \- Salt Cloud Command
 .

diff --git a/doc/man/salt-cp.1 b/doc/man/salt-cp.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-CP" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-CP" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-cp \- salt-cp Documentation
 .

diff --git a/doc/man/salt-key.1 b/doc/man/salt-key.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-KEY" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-KEY" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-key \- salt-key Documentation
 .

diff --git a/doc/man/salt-master.1 b/doc/man/salt-master.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-MASTER" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-MASTER" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-master \- salt-master Documentation
 .

diff --git a/doc/man/salt-minion.1 b/doc/man/salt-minion.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-MINION" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-MINION" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-minion \- salt-minion Documentation
 .

diff --git a/doc/man/salt-proxy.1 b/doc/man/salt-proxy.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-PROXY" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-PROXY" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-proxy \- salt-proxy Documentation
 .

diff --git a/doc/man/salt-run.1 b/doc/man/salt-run.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-RUN" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-RUN" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-run \- salt-run Documentation
 .

diff --git a/doc/man/salt-ssh.1 b/doc/man/salt-ssh.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-SSH" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-SSH" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-ssh \- salt-ssh Documentation
 .

diff --git a/doc/man/salt-syndic.1 b/doc/man/salt-syndic.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-SYNDIC" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-SYNDIC" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-syndic \- salt-syndic Documentation
 .

diff --git a/doc/man/salt-unity.1 b/doc/man/salt-unity.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT-UNITY" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT-UNITY" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt-unity \- salt-unity Command
 .

diff --git a/doc/man/salt.1 b/doc/man/salt.1
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SALT" "1" "Jul 29, 2021" "3003.2" "Salt"
+.TH "SALT" "1" "Aug 20, 2021" "3003.3" "Salt"
 .SH NAME
 salt \- salt
 .