Ubuntu
puppet package

puppet 0.25.4-2ubuntu6.3 source package in Ubuntu

Changelog

puppet (0.25.4-2ubuntu6.3) lucid-security; urgency=low

  * SECURITY UPDATE: k5login can overwrite arbitrary files as root
    - adjust type/k5login.rb to securely open the file before writing to it as
      root. Patch from upstream: a4333c110ad084f205605708eaab52ad243d6c86
    - CVE-2011-3869
  * SECURITY UPDATE: didn't drop privileges before creating and changing
    permissions on SSH keys
    - adjust ssh_authorized_key/parsed.rb to drop privileges before creating
      the ssh directory and setting permissions. Patches based on upstream:
      ce233aa2a511bf6818f28c226144ec5b05a468ee (required for security fix)
      e2c1cd5c957a236f89b9e8cb7b4e4f8769079e8c (security fix)
      8d9575775737c08c6cbfdf7f9a22f2ea4ab21b20 (backported rspec test case)
      0aae5a71a8e3b38cd8d7041f5c40091887c924a8 (fix test when run as root)
    - CVE-2011-3870
  * SECURITY UPDATE: fix predictable temporary filename in ralsh
    - adjust application/resource.rb to use an unpredictable filename. Patch
      from upstream: 21b7192320dbb79a8cfe1fd3e06d0d399c964c0f
    - CVE-2011-3871
 -- Jamie Strandboge <email address hidden>   Fri, 30 Sep 2011 09:18:51 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Lucid
Original maintainer:
Ubuntu Core Developers
Architectures:
all
Section:
admin
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Lucid: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
puppet_0.25.4.orig.tar.gz 1.3 MiB 94999cecf1408b26facf0416a7fc41a6b167bcf0fbb39f491e7eb79f6d1e506e
puppet_0.25.4-2ubuntu6.3.diff.gz 44.2 KiB 35aa7dcc566ea5de82801f35f4be0108644edae4b4fe9c0ab726130acb0ed67e
puppet_0.25.4-2ubuntu6.3.dsc 2.2 KiB 5dd176d615ca6eeab100bd2d8260b73dc880dc4f5566461769073ef878f19d40

View changes file

Binary packages built by this source

puppet: No summary available for puppet in ubuntu lucid.

No description available for puppet in ubuntu lucid.

puppet-common: No summary available for puppet-common in ubuntu lucid.

No description available for puppet-common in ubuntu lucid.

puppet-el: No summary available for puppet-el in ubuntu lucid.

No description available for puppet-el in ubuntu lucid.

puppet-testsuite: No summary available for puppet-testsuite in ubuntu lucid.

No description available for puppet-testsuite in ubuntu lucid.

puppetmaster: No summary available for puppetmaster in ubuntu lucid.

No description available for puppetmaster in ubuntu lucid.

vim-puppet: No summary available for vim-puppet in ubuntu lucid.

No description available for vim-puppet in ubuntu lucid.