Ubuntu

“puppet” 0.25.4-2ubuntu6.7 source package in Ubuntu

Changelog

puppet (0.25.4-2ubuntu6.7) lucid-security; urgency=low

  * SECURITY UPDATE: Arbitrary file writes via predictable filename usage in
    appdmg and pkgdmg providers
    - lib/puppet/provider/package/{appdmg.rb,pkgdmg.rb}: Use mktmpdir when
      downloading packages. Based on upstream patch.
    - CVE-2012-1906
  * SECURITY UPDATE: Arbitrary file reads via Filebucket REST requests
    - lib/puppet/network/http/api/v1.rb: Fix for bucket_path security
      vulnerability. Based on upstream patch.
    - CVE-2012-1986
  * SECURITY UPDATE: Denial of service via Filebucket text/marshall support
    - lib/puppet/network/formats.rb: Removed text/marshal support. Based on
      upstream patch.
    - CVE-2012-1987
  * SECURITY UPDATE: Arbitrary code execution via Filebucket requests
    - lib/puppet/network/http/api/v1.rb: Fix for bucket_path security
      vulnerability. Based on upstream patch.
    - CVE-2012-1988
  * spec/unit/property/keyvalue.rb: Fix testsuite failure caused by hash
    randomization in Ruby. Based on upstream patch.
    - 765036c707a29077107674ad5c6277df6e637b28
 -- Tyler Hicks <email address hidden>   Tue, 10 Apr 2012 11:47:14 -0500

Upload details

Uploaded by:
Tyler Hicks on 2012-04-10
Uploaded to:
Lucid
Original maintainer:
Ubuntu Core Developers
Component:
main
Architectures:
all
Section:
admin
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Lucid: [FULLYBUILT] i386

Downloads

File Size MD5 Checksum
puppet_0.25.4.orig.tar.gz 1.3 MiB 227a771a6c8b8a95a66288ffe5a52f32
puppet_0.25.4-2ubuntu6.7.diff.gz 59.8 KiB bc66de5db8b927b6594a99f3f40af6d4
puppet_0.25.4-2ubuntu6.7.dsc 2.2 KiB a5e4a2a10d1820269c0b41231de80158

Binary packages built by this source

puppet: Centralized configuration management - agent startup and compatibility scripts

 This package contains the startup script and compatbility scripts for the
 puppet agent, which is the process responsible for configuring the local node.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

puppet-common: Centralized configuration management

 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.
 .
 This package contains the puppet software and documentation. For the startup
 scripts needed to run the puppet agent and master, see the "puppet" and
 "puppetmaster" packages, respectively.

puppet-el: syntax highlighting for puppet manifests in emacs

 The puppet-el package provides syntax highlighting for puppet manifests

puppet-testsuite: Centralized configuration management - test suite

 This package provides all the tests from the upstream puppet source code.
 The tests are used for improving the QA of the puppet package.

puppetmaster: Centralized configuration management - master startup and compatibility scripts

 This package contains the startup and compatibility scripts for the puppet
 master, which is the server hosting manifests and files for the puppet nodes.
 .
 Puppet lets you centrally manage every important aspect of your system
 using a cross-platform specification language that manages all the
 separate elements normally aggregated in different files, like users,
 cron jobs, and hosts, along with obviously discrete elements like
 packages, services, and files.
 .
 Puppet's simple declarative specification language provides powerful
 classing abilities for drawing out the similarities between hosts while
 allowing them to be as specific as necessary, and it handles dependency
 and prerequisite relationships between objects clearly and explicitly.

vim-puppet: syntax highlighting for puppet manifests in vim

 The vim-puppet package provides filetype detection and syntax highlighting for
 puppet manifests (files ending with ".pp").