Ubuntu
puppet package

puppet 0.24.8-2ubuntu4.1 source package in Ubuntu

Changelog

puppet (0.24.8-2ubuntu4.1) karmic-security; urgency=low

  * SECURITY UPDATE: arbitrary file disclosure via incorrect permissions
    - lib/puppet/{util.rb,util/suidmanager.rb}: reset supplementary groups.
    - http://projects.reductivelabs.com/projects/puppet/repository/revisions/e32f980fd7c6291abc2841ede397c962798d9a9c/diff
    - CVE-2009-3564
  * SECURITY UPDATE: arbitrary file overwrite via temp file symlinks
    - lib/puppet/{daemon.rb,util.rb,util/reference.rb}: introduce new
      secure_open function and use it on temp files.
    - http://projects.reductivelabs.com/projects/puppet/repository/revisions/0aae57f91dc69b22fb674f8de3a13c22edd07128/diff
    - http://projects.reductivelabs.com/projects/puppet/repository/revisions/0dee418554151289b13136c43f0d1d6484efbac7/diff
    - CVE-2010-0156
  * Fix directory paths so test suite will run (LP: #488708)
    - test/lib/puppettest/support/utils.rb, test/lib/puppettest.rb
 -- Marc Deslauriers <email address hidden>   Wed, 17 Mar 2010 09:44:13 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Karmic
Original maintainer:
MOTU
Architectures:
all
Section:
admin
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Karmic: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
puppet_0.24.8.orig.tar.gz 1.0 MiB 3197c49035c3a059a2797341694655ba5bc3254b650a2950a7e45238c0cc0ed7
puppet_0.24.8-2ubuntu4.1.diff.gz 15.7 KiB 9da13b32c4948a35e694d7573ad6b061f7590205972321c85bbebadfa9e6767e
puppet_0.24.8-2ubuntu4.1.dsc 1.5 KiB 99da5083a92651de31b9b90c85f81bda83965fe8095eaa8c1e8fade270f02e49

View changes file

Binary packages built by this source

puppet: No summary available for puppet in ubuntu karmic.

No description available for puppet in ubuntu karmic.

puppet-testsuite: No summary available for puppet-testsuite in ubuntu karmic.

No description available for puppet-testsuite in ubuntu karmic.

puppetmaster: No summary available for puppetmaster in ubuntu karmic.

No description available for puppetmaster in ubuntu karmic.