Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bab836e7 by Moritz Muehlenhoff at 2023-01-19T09:15:33+01:00
puppetserver is in the archive now
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -138359,7 +138359,7 @@ CVE-2021-27023 (A flaw was discovered in Puppet Agent
and Puppet Server that may
[buster] - puppet <ignored> (Minor issue)
[stretch] - puppet <ignored> (Minor issue)
- puppet-agent <not-affected> (Fixed before initial release, in 6.25.1)
- - puppetserver <itp> (bug #830904)
+ - puppetserver <not-affected> (Fixed before initial release, in 7.4.2)
NOTE: https://puppet.com/security/cve/cve-2021-27023
NOTE:
https://github.com/puppetlabs/puppet/commit/e90023a8b54a58073d71dae655d7636e2c9bcc61
(6.25.1)
NOTE: Marginal/unclear security implications, the redirects are fully
under control of
@@ -217716,7 +217716,7 @@ CVE-2020-7943 (Puppet Server and PuppetDB provide
useful performance and debuggi
[experimental] - puppetdb 7.10.1-1
- puppetdb 7.11.2-2 (low)
[buster] - puppetdb <no-dsa> (Minor issue)
- - puppetserver <itp> (bug #830904)
+ - puppetserver <not-affected> (Fixed before initial release, in 6.11.1)
NOTE: https://puppet.com/security/cve/CVE-2020-7943/
NOTE: https://github.com/puppetlabs/puppet_metrics_dashboard/pull/92
CVE-2020-7942 (Previously, Puppet operated on a model that a node with a valid
certif ...)
@@ -422616,7 +422616,7 @@ CVE-2016-2786 (The pxp-agent component in Puppet
Enterprise 2015.3.x before 2015
NOTE: https://puppet.com/security/cve/cve-2016-2786
CVE-2016-2785 (Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x
before ...)
- puppet <not-affected> (Vulnerable code only in 4.x)
- - puppetserver <itp> (bug #830904)
+ - puppetserver <not-affected> (Fixed before initial release, in 2.3.2)
NOTE: https://puppet.com/security/cve/cve-2016-2785
NOTE:
https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2
CVE-2016-2784 (CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when
Smarty Ca ...)
@@ -463855,7 +463855,7 @@ CVE-2014-7172
CVE-2014-7171
RESERVED
CVE-2014-7170 (Race condition in Puppet Server 0.2.0 allows local users to
obtain sen ...)
- - puppetserver <itp> (bug #830904)
+ - puppetserver <not-affected> (Upstream-specific packaging bug)
NOTE: https://puppet.com/security/cve/cve-2014-7170
NOTE: Is actually a packaging bug in upstream provided packages fixed
in 0.2.0.
CVE-2014-7204 (jscript.c in Exuberant Ctags 5.8 allows remote attackers to
cause a de ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bab836e73a159812983c318de1060ac7fad873f7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bab836e73a159812983c318de1060ac7fad873f7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
