Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

git dependencies fail with salt 3005.5+ #348

Open
sblaisot opened this issue May 25, 2024 · 0 comments · May be fixed by #349
Open

git dependencies fail with salt 3005.5+ #348

sblaisot opened this issue May 25, 2024 · 0 comments · May be fixed by #349

Comments

@sblaisot
Copy link

Salt 3005.5 and 3006.6 introduced a fix for CVE-2024-22231 and CVE-2024-22232 by refusing to serve files outside of file root.

Howevec kitchen-salt provisionner get git formulas dependencies in /usr/share/salt-formulas/env} ans symlink them in fileroot so salt cannot find the dependency formulas anymore.

Each test requiring a git dependency now fail under salt 3005.5+ or 3006.6+

@sblaisot sblaisot linked a pull request May 25, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant