[Bug 1267385] Re: Default file mode now 0600 instead of 0644 (regression in CVE-2013-4969 fix)

Launchpad Bug Tracker 1267385 at bugs.launchpad.net
Thu Jan 9 15:52:12 UTC 2014


This bug was fixed in the package puppet - 3.2.4-2ubuntu2.3

---------------
puppet (3.2.4-2ubuntu2.3) saucy-security; urgency=low

  * SECURITY REGRESSION: Incorrect default file mode (LP: #1267385)
    - debian/patches/CVE-2013-4969-regression.patch: fix incorrect file
      mode in lib/puppet/type/file.rb, lib/puppet/util.rb,
      spec/unit/type/file_spec.rb.
    - CVE-2013-4969
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Thu, 09 Jan 2014 07:48:28 -0500

** Changed in: puppet (Ubuntu Saucy)
       Status: New => Fix Released

** Changed in: puppet (Ubuntu Precise)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1267385

Title:
  Default file mode now 0600 instead of 0644 (regression in
  CVE-2013-4969 fix)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1267385/+subscriptions



More information about the Ubuntu-server-bugs mailing list