We are pleased to announce the 2017.7.8 release of Salt!
Release notes can be found here:
Instructions for installing the latest packages can be found here:
Sources are available on PyPI:
2017.7.8 is a security release. The following CVE's were fixed as part of this release:
CVE-2018-15751 Remote command execution and incorrect access control when using salt-api.
CVE-2018-15750 Directory traversal vulnerability when using salt-api. Allows an attacker to determine what files exist on a server when querying /run or /events.
NOTE: We are still currently continuing the following release tasks and will update here when they are completed: Building Docs for Release (This includes Release Notes) and Testing the Downloads of Live Packages.
Thank you, as always, for your contributions.