puppet (2.7.1-1ubuntu3.6) oneiric-security; urgency=low

  * SECURITY UPDATE: Arbitrary file writes via predictable filename usage in
    appdmg and pkgdmg providers
    - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
    - CVE-2012-1906
  * SECURITY UPDATE: Arbitrary file reads via Filebucket REST requests
    - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
    - CVE-2012-1986
  * SECURITY UPDATE: Denial of service via Filebucket text/marshall support
    - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
    - CVE-2012-1987
  * SECURITY UPDATE: Arbitrary code execution via Filebucket requests
    - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
    - CVE-2012-1988
  * SECURITY UPDATE: Arbritrary file writes via predictable telnet output log
    filename
    - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
    - CVE-2012-1989
  * debian/patches/fix-unpredictable-hash-ordering-tests.patch: Fix testsuite
    failures caused by hash randomization in Ruby

Date: Tue, 10 Apr 2012 11:47:14 -0500
Changed-By: Tyler Hicks <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/oneiric/+source/puppet/2.7.1-1ubuntu3.6
Format: 1.8
Date: Tue, 10 Apr 2012 11:47:14 -0500
Source: puppet
Binary: puppet-common puppet puppetmaster-common puppetmaster 
puppetmaster-passenger vim-puppet puppet-el puppet-testsuite
Architecture: source
Version: 2.7.1-1ubuntu3.6
Distribution: oneiric-security
Urgency: low
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Tyler Hicks <[email protected]>
Description: 
 puppet     - Centralized configuration management - agent startup and compatib
 puppet-common - Centralized configuration management
 puppet-el  - syntax highlighting for puppet manifests in emacs
 puppet-testsuite - Centralized configuration management - test suite
 puppetmaster - Centralized configuration management - master startup and 
compati
 puppetmaster-common - Puppet master common scripts
 puppetmaster-passenger - Centralised configuration management - master setup 
to run under
 vim-puppet - syntax highlighting for puppet manifests in vim
Changes: 
 puppet (2.7.1-1ubuntu3.6) oneiric-security; urgency=low
 .
   * SECURITY UPDATE: Arbitrary file writes via predictable filename usage in
     appdmg and pkgdmg providers
     - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
     - CVE-2012-1906
   * SECURITY UPDATE: Arbitrary file reads via Filebucket REST requests
     - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
     - CVE-2012-1986
   * SECURITY UPDATE: Denial of service via Filebucket text/marshall support
     - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
     - CVE-2012-1987
   * SECURITY UPDATE: Arbitrary code execution via Filebucket requests
     - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
     - CVE-2012-1988
   * SECURITY UPDATE: Arbritrary file writes via predictable telnet output log
     filename
     - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
     - CVE-2012-1989
   * debian/patches/fix-unpredictable-hash-ordering-tests.patch: Fix testsuite
     failures caused by hash randomization in Ruby
Checksums-Sha1: 
 e139d7d422275c5d8e30cff88d553300a76cf6f7 2299 puppet_2.7.1-1ubuntu3.6.dsc
 d19a60e624690e8d78a4f4ff764ddc58e82cb58e 105902 
puppet_2.7.1-1ubuntu3.6.debian.tar.gz
Checksums-Sha256: 
 92eff6cbd9a90a3705ca92d4d6ca89778f59095d5355ad17f551cd47e92084e2 2299 
puppet_2.7.1-1ubuntu3.6.dsc
 efc78a8a6d8566582f5aefb436844a8293383926c1c8469b5203efd7382333ed 105902 
puppet_2.7.1-1ubuntu3.6.debian.tar.gz
Files: 
 5b25968dbc1ef32b69cb5f1ee625b9b4 2299 admin optional 
puppet_2.7.1-1ubuntu3.6.dsc
 40c1e982643f73dc6f0341ebb2f0f2e9 105902 admin optional 
puppet_2.7.1-1ubuntu3.6.debian.tar.gz
Original-Maintainer: Puppet Package Maintainers 
<[email protected]>
-- 
Oneiric-changes mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/oneiric-changes

Reply via email to