puppet 0.25.4-2ubuntu6.3 source package in Ubuntu

Changelog

puppet (0.25.4-2ubuntu6.3) lucid-security; urgency=low

  * SECURITY UPDATE: k5login can overwrite arbitrary files as root
    - adjust type/k5login.rb to securely open the file before writing to it as
      root. Patch from upstream: a4333c110ad084f205605708eaab52ad243d6c86
    - CVE-2011-3869
  * SECURITY UPDATE: didn't drop privileges before creating and changing
    permissions on SSH keys
    - adjust ssh_authorized_key/parsed.rb to drop privileges before creating
      the ssh directory and setting permissions. Patches based on upstream:
      ce233aa2a511bf6818f28c226144ec5b05a468ee (required for security fix)
      e2c1cd5c957a236f89b9e8cb7b4e4f8769079e8c (security fix)
      8d9575775737c08c6cbfdf7f9a22f2ea4ab21b20 (backported rspec test case)
      0aae5a71a8e3b38cd8d7041f5c40091887c924a8 (fix test when run as root)
    - CVE-2011-3870
  * SECURITY UPDATE: fix predictable temporary filename in ralsh
    - adjust application/resource.rb to use an unpredictable filename. Patch
      from upstream: 21b7192320dbb79a8cfe1fd3e06d0d399c964c0f
    - CVE-2011-3871
 -- Jamie Strandboge <email address hidden>   Fri, 30 Sep 2011 09:18:51 -0500

Upload details

Uploaded by:
Jamie Strandboge on 2011-09-30
Uploaded to:
Lucid
Original maintainer:
Ubuntu Core Developers
Component:
main
Architectures:
all
Section:
admin
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Lucid: [FULLYBUILT] i386

Downloads

File Size MD5 Checksum
puppet_0.25.4.orig.tar.gz 1.3 MiB 227a771a6c8b8a95a66288ffe5a52f32
puppet_0.25.4-2ubuntu6.3.diff.gz 44.2 KiB c9723aa14a1cf5734f26d49596f312bb
puppet_0.25.4-2ubuntu6.3.dsc 2.2 KiB f260404c34d57a0c1c1c0c2b9d1d4aee

View changes file

Binary packages built by this source

puppet: Centralized configuration management - agent startup and compatibility scripts

 This package contains the startup script and compatbility scripts for the
 puppet agent, which is the process responsible for configuring the local node.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

puppet-common: Centralized configuration management

 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.
 .
 This package contains the puppet software and documentation. For the startup
 scripts needed to run the puppet agent and master, see the "puppet" and
 "puppetmaster" packages, respectively.

puppet-el: syntax highlighting for puppet manifests in emacs

 The puppet-el package provides syntax highlighting for puppet manifests

puppet-testsuite: Centralized configuration management - test suite

 This package provides all the tests from the upstream puppet source code.
 The tests are used for improving the QA of the puppet package.

puppetmaster: Centralized configuration management - master startup and compatibility scripts

 This package contains the startup and compatibility scripts for the puppet
 master, which is the server hosting manifests and files for the puppet nodes.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

vim-puppet: syntax highlighting for puppet manifests in vim

 The vim-puppet package provides filetype detection and syntax highlighting for
 puppet manifests (files ending with ".pp").