[ubuntu/precise-security] puppet 2.7.11-1ubuntu2.2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Mar 12 19:32:20 UTC 2013
puppet (2.7.11-1ubuntu2.2) precise-security; urgency=low
* SECURITY UPDATE: Multiple security issues
- debian/patches/security-mar-2013.patch: upstream patch to fix
multiple security issues.
- CVE-2013-1640 - Remote code execution on master from authenticated clients
- CVE-2013-1652 - Insufficient input validation
- CVE-2013-1653 - Remote code execution
- CVE-2013-1654 - Protocol downgrade
- CVE-2013-1655 - Unauthenticated remote code execution risk
- CVE-2013-2275 - Incorrect default report ACL
Date: 2013-03-12 15:30:11.012140+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/precise/+source/puppet/2.7.11-1ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list