[Bug 978708] Re: [Precise] puppet is vulnerable to CVE-2012-1906 and CVE-2012-1986 through CVE-2012-1989

Tyler Hicks tyhicks at canonical.com
Wed Apr 11 09:11:54 UTC 2012


The diff between the output of 'cd /usr/share/puppet-testsuite && rake
spec unit' ran under puppet-2.7.11-1ubuntu1 and puppet-2.7.11-1ubuntu2
(which is simply the debdiff attached above applied).

Note that there are many false positives from failed Windows tests. I'm
not sure why these tests are being ran, but it looks like
Puppet.features.microsoft_windows is not testing out to be false.

** Patch added: "puppet-2.7.11-1ubuntu2_rake-spec-unit.diff"
   https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/978708/+attachment/3045160/+files/puppet-2.7.11-1ubuntu2_rake-spec-unit.diff

** Visibility changed to: Public

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/978708

Title:
  [Precise] puppet is vulnerable to CVE-2012-1906 and CVE-2012-1986
  through CVE-2012-1989

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/978708/+subscriptions



More information about the Ubuntu-server-bugs mailing list