[ubuntu/precise-security] puppet 2.7.11-1ubuntu2.2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Tue Mar 12 19:32:20 UTC 2013


puppet (2.7.11-1ubuntu2.2) precise-security; urgency=low

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/security-mar-2013.patch: upstream patch to fix
      multiple security issues.
    - CVE-2013-1640 - Remote code execution on master from authenticated clients
    - CVE-2013-1652 - Insufficient input validation
    - CVE-2013-1653 - Remote code execution
    - CVE-2013-1654 - Protocol downgrade
    - CVE-2013-1655 - Unauthenticated remote code execution risk
    - CVE-2013-2275 - Incorrect default report ACL

Date: 2013-03-12 15:30:11.012140+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/precise/+source/puppet/2.7.11-1ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Precise-changes mailing list