<commit_before>===========================
Salt 2015.8.4 Release Notes
===========================

Security Fix
============

CVE-2016-1866: Improper handling of clear messages on the minion, which could result in executing commands not sent by the master.

This issue affects only the 2015.8.x releases of Salt. In order for an attacker to use this attack vector, they would have to execute a successful attack on an existing TCP connection between minion and master on the pub port. It does not allow an external attacker to obtain the shared secret or decrypt any encrypted traffic between minion and master.<commit_msg>Added known issue #30820 to 2015.8.4 release notes<commit_after>===========================
Salt 2015.8.4 Release Notes
===========================

Known Issues
============

.. important:: :issue:`30820`

    This issue affects all users targeting an explicit ``- name: <name>`` with a ``_in``
    requisite (such as ``watch_in`` or ``require_in``). If you are not using explicit ``-
    name: <name>`` arguments, are targeting with the state ID instead of the name,
    or are not using ``_in`` requisites, then you should be safe to upgrade to
    2015.8.4.

    We are working on a 2015.8.5 release to resolve this issue. It will be available as
    soon as possible.

Security Fix
============

CVE-2016-1866: Improper handling of clear messages on the minion, which could result in executing commands not sent by the master.

This issue affects only the 2015.8.x releases of Salt. In order for an attacker to use this attack vector, they would have to execute a successful attack on an existing TCP connection between minion and master on the pub port. It does not allow an external attacker to obtain the shared secret or decrypt any encrypted traffic between minion and master.
{'fraction_non_alphanumeric': 0.1281767955801105, 'fraction_numerical': 0.036464088397790057, 'mean_word_length': 4.3579881656804735, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7036395', 'n_tokens_mistral': 495, 'n_tokens_neox': 425, 'n_words': 258}