[ubuntu/oneiric-security] puppet 2.7.1-1ubuntu3.8 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Tue Mar 12 19:32:17 UTC 2013


puppet (2.7.1-1ubuntu3.8) oneiric-security; urgency=low

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/security-mar-2013.patch: upstream patch to fix
      multiple security issues.
    - CVE-2013-1640 - Remote code execution on master from authenticated clients
    - CVE-2013-1652 - Insufficient input validation
    - CVE-2013-1653 - Remote code execution
    - CVE-2013-1654 - Protocol downgrade
    - CVE-2013-1655 - Unauthenticated remote code execution risk
    - CVE-2013-2275 - Incorrect default report ACL

Date: 2013-03-12 15:35:12.842171+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/oneiric/+source/puppet/2.7.1-1ubuntu3.8
-------------- next part --------------
Sorry, changesfile not available.


More information about the Oneiric-changes mailing list