puppet 0.25.4-2ubuntu6.3 source package in Ubuntu

Changelog

puppet (0.25.4-2ubuntu6.3) lucid-security; urgency=low

  * SECURITY UPDATE: k5login can overwrite arbitrary files as root
    - adjust type/k5login.rb to securely open the file before writing to it as
      root. Patch from upstream: a4333c110ad084f205605708eaab52ad243d6c86
    - CVE-2011-3869
  * SECURITY UPDATE: didn't drop privileges before creating and changing
    permissions on SSH keys
    - adjust ssh_authorized_key/parsed.rb to drop privileges before creating
      the ssh directory and setting permissions. Patches based on upstream:
      ce233aa2a511bf6818f28c226144ec5b05a468ee (required for security fix)
      e2c1cd5c957a236f89b9e8cb7b4e4f8769079e8c (security fix)
      8d9575775737c08c6cbfdf7f9a22f2ea4ab21b20 (backported rspec test case)
      0aae5a71a8e3b38cd8d7041f5c40091887c924a8 (fix test when run as root)
    - CVE-2011-3870
  * SECURITY UPDATE: fix predictable temporary filename in ralsh
    - adjust application/resource.rb to use an unpredictable filename. Patch
      from upstream: 21b7192320dbb79a8cfe1fd3e06d0d399c964c0f
    - CVE-2011-3871
 -- Jamie Strandboge <email address hidden>   Fri, 30 Sep 2011 09:18:51 -0500

Upload details

Uploaded by:
Jamie Strandboge on 2011-09-30
Uploaded to:
Lucid
Original maintainer:
Ubuntu Core Developers
Architectures:
all
Section:
admin
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Lucid: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
puppet_0.25.4.orig.tar.gz 1.3 MiB 94999cecf1408b26facf0416a7fc41a6b167bcf0fbb39f491e7eb79f6d1e506e
puppet_0.25.4-2ubuntu6.3.diff.gz 44.2 KiB 35aa7dcc566ea5de82801f35f4be0108644edae4b4fe9c0ab726130acb0ed67e
puppet_0.25.4-2ubuntu6.3.dsc 2.2 KiB 5dd176d615ca6eeab100bd2d8260b73dc880dc4f5566461769073ef878f19d40

View changes file

Binary packages built by this source

puppet: Centralized configuration management - agent startup and compatibility scripts

 This package contains the startup script and compatbility scripts for the
 puppet agent, which is the process responsible for configuring the local node.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

puppet-common: Centralized configuration management

 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.
 .
 This package contains the puppet software and documentation. For the startup
 scripts needed to run the puppet agent and master, see the "puppet" and
 "puppetmaster" packages, respectively.

puppet-el: syntax highlighting for puppet manifests in emacs

 The puppet-el package provides syntax highlighting for puppet manifests

puppet-testsuite: Centralized configuration management - test suite

 This package provides all the tests from the upstream puppet source code.
 The tests are used for improving the QA of the puppet package.

puppetmaster: Centralized configuration management - master startup and compatibility scripts

 This package contains the startup and compatibility scripts for the puppet
 master, which is the server hosting manifests and files for the puppet nodes.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

vim-puppet: syntax highlighting for puppet manifests in vim

 The vim-puppet package provides filetype detection and syntax highlighting for
 puppet manifests (files ending with ".pp").