[ubuntu/lucid-security] puppet 0.25.4-2ubuntu6.8 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Jul 12 17:03:43 UTC 2012


puppet (0.25.4-2ubuntu6.8) lucid-security; urgency=low

  * SECURITY UPDATE: multiple July 2012 security issues
    - Backported from upstream patch for 2.6.4.
    - CVE-2012-3864: arbitrary file read on master from authenticated
      clients
    - CVE-2012-3865: arbitrary file delete or denial of service on master
      from authenticated clients
    - CVE-2012-3867: insufficient input validation for agent cert hostnames

Date: Thu, 12 Jul 2012 07:56:24 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/puppet/0.25.4-2ubuntu6.8
-------------- next part --------------
Format: 1.8
Date: Thu, 12 Jul 2012 07:56:24 -0400
Source: puppet
Binary: puppet puppetmaster puppet-common vim-puppet puppet-el puppet-testsuite
Architecture: source
Version: 0.25.4-2ubuntu6.8
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 puppet     - centralised configuration management for networks
 puppet-common - common files for puppet and puppetmaster
 puppet-el  - Emacs syntax highlighting for puppet manifests
 puppet-testsuite - centralized configuration management control for networks
 puppetmaster - centralised configuration management control daemon
 vim-puppet - Vim syntax highlighting for puppet manifests
Changes: 
 puppet (0.25.4-2ubuntu6.8) lucid-security; urgency=low
 .
   * SECURITY UPDATE: multiple July 2012 security issues
     - Backported from upstream patch for 2.6.4.
     - CVE-2012-3864: arbitrary file read on master from authenticated
       clients
     - CVE-2012-3865: arbitrary file delete or denial of service on master
       from authenticated clients
     - CVE-2012-3867: insufficient input validation for agent cert hostnames
Checksums-Sha1: 
 7b686d02bfcbafc5d5d7895821ad0c5ec565a581 2209 puppet_0.25.4-2ubuntu6.8.dsc
 98e508b42623cf335a7ea395b5e24b7f475b8cf8 69518 puppet_0.25.4-2ubuntu6.8.diff.gz
Checksums-Sha256: 
 6f431a76711a74c02a8bbd48f05f97e8bfcff8176cdc400a71843d9dccc0ed81 2209 puppet_0.25.4-2ubuntu6.8.dsc
 4e927b457a746022f563564874a8a4bd86cc3e35a53d2d0b1cfe9f0d1ff94f5b 69518 puppet_0.25.4-2ubuntu6.8.diff.gz
Files: 
 5166c1f5ce73fa6304bf5d1abc99a32b 2209 admin optional puppet_0.25.4-2ubuntu6.8.dsc
 4db4da3205af2bf1ec45367727601d08 69518 admin optional puppet_0.25.4-2ubuntu6.8.diff.gz
Original-Maintainer: Puppet Package Maintainers <pkg-puppet-devel at lists.alioth.debian.org>


More information about the Lucid-changes mailing list