~lynxman/ubuntu/precise/puppet/puppetlabsfixbug12844

• Changes
• Files

~lynxman/ubuntu/precise/puppet/puppetlabsfixbug12844 » Changes from revision 64

From Revision 54 to 35

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
54		* SECURITY UPDATE: puppet master impersonation via incorrect... * SECURITY UPDATE: puppet master impersonation via incorrect certificates   - debian/patches/CVE-2011-3872.patch: refactor certificate handling.   - Thanks to upstream for providing the patch.   - CVE-2011-3872	Marc Deslauriers	2.7.1-1ubuntu3.2	12 years ago
53		* SECURITY UPDATE: k5login can overwrite arbitrary files as ... * SECURITY UPDATE: k5login can overwrite arbitrary files as root   - debian/patches/CVE-2011-3869.patch: adjust type/k5login.rb to securely     open the file before writing to it as root   - CVE-2011-3869 * SECURITY UPDATE: didn't drop privileges before creating and changing   permissions on SSH keys   - debian/patches/CVE-2011-3870.patch: adjust ssh_authorized_key/parsed.rb     to drop privileges before creating the ssh directory and setting     permissions   - CVE-2011-3870 * SECURITY UPDATE: fix predictable temporary filename in ralsh   - debian/patches/CVE-2011-3871.patch: adjust application/resource.rb to     use an unpredictable filename   - CVE-2011-3871 * SECURITY UPDATE: file indirector injection, similar to CVE-2011-3848   - secure-indirector-file-backed-terminus-base-cla.patch: Since the     indirector file backed terminus base class is only used by the test     suite, remove it and update test cases to use a continuing class.	Jamie Strandboge	2.7.1-1ubuntu3	12 years ago
52		* SECURITY UPDATE: unauthenticated directory traversal allow... * SECURITY UPDATE: unauthenticated directory traversal allows writing of   arbitrary files as puppet master   - debian/patches/CVE-2011-3848.patch: update lib/puppet/indirector.rb,     lib/puppet/indirector/ssl_file.rb, lib/puppet/indirector/yaml.rb,     spec/unit/indirector/ssl_file.rb and spec/unit/indirector/yaml.rb to     perform proper input validation.   - CVE-2011-3848   - LP: #861182	Jamie Strandboge	2.7.1-1ubuntu2	12 years ago
51		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to     set the location of the CRL in apache2 configuration. Fix apache2     configuration on upgrade as well (LP: #641001)   - move all puppet dependencies to puppet-common since all the code     actually located in puppet-common.   - move libagueas from a recommend to a dependency.	Chuck Short	2.7.1-1ubuntu1	12 years ago
50		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to     set the location of the CRL in apache2 configuration. Fix apache2      configuration on upgrade as well (LP: #641001)   - move all puppet dependencies to puppet-common since all the code      actually located in puppet-common.   - move libagueas from a recommend to a dependency.	Chuck Short	2.6.8-1ubuntu1	13 years ago
49		releasing version 2.6.4-2ubuntu2 releasing version 2.6.4-2ubuntu2	Dave Walker (Daviey)	2.6.4-2ubuntu2	13 years ago
48		debian/puppetmaster.default: Removed extra white space at EO... debian/puppetmaster.default: Removed extra white space at EOF	Dave Walker (Daviey)		13 years ago
47		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to     set the location of the CRL in apache2 configuration. Fix apache2      configuration on upgrade as well (LP: #641001)   - move all puppet dependencies to puppet-common since all the code      actually located in puppet-common.   - move libagueas from a recommend to a dependency.	Chuck Short	2.6.4-2ubuntu1	13 years ago
46		New upstream version. New upstream version.	Mathias Gug	2.6.3-0ubuntu1	13 years ago
45		New upstream version New upstream version	Mathias Gug	2.6.3~rc3-0ubuntu1	13 years ago
44		New upstream version New upstream version	Mathias Gug	2.6.3~rc2-0ubuntu1	13 years ago
43		* New upstream version * New upstream version * debian/control:   - move all puppet dependencies to puppet-common since all the code is     actually located in puppet-common.    - move libaugeas from a recommend to a dependency.	Mathias Gug	2.6.3~rc1-0ubuntu1	13 years ago
42		debian/puppetmaster-passenger.postinst: Use cacrl instead of... debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to set the location of the CRL in apache2 configuration. Fix apache2  configuration on upgrade as well (LP: #641001).	Mathias Gug	2.6.1-0ubuntu2	13 years ago
41		[ Stig Sandbeck Mathisen ] [ Stig Sandbeck Mathisen ] * Add dependency on "facter" for "puppet-common" * Make sure the "puppet-common" package can be purged even when not fully   installed (Closes: #596163) [ Mathias Gug ] * New upstream version.	Mathias Gug	2.6.1-0ubuntu1	13 years ago
40		[ Mathias Gug ] [ Mathias Gug ] * New upstream version:   - Fix "Puppet standalone broken" (Closes: #594575) * test/lib/puppettest/fakes.rb: Fix puppettest to use puppet system    library. [ Stig Sandbeck Mathisen ] * Fix "require" path for puppet queue.	Mathias Gug	2.6.1~rc4-0ubuntu1	13 years ago
39		[ Mathias Gug ] [ Mathias Gug ] * New upstream version:   - fix config.ru file to run puppetmaster as a rack application.     (Closes: #593557) * Fix test suite to run from a package install rather then from the source   directory:   + Rakefile: use system puppet.rb file to detect version.   + spec/unit/application/apply_spec.rb: Fix test suite to use puppet      system library.   + spec/spec_helper.rb: disable gem. * Fix init service provider to correctly check the status of services   using upstart jobs (Closes: #584481, LP: #551544). * etckeeper integration (Closes: #571127)   [server-lucid-puppet-etckeeper-integration]:   + debian/etckeeper-commit-post, debian/etckeeper-commit-pre:      Call "etckeeper commit" before and after catalog runs.      Silently bail out if etckeeper is not available.   + debian/puppet.conf: Call out to the etckeeper hooks using       the prerun_command and postrun_command hooks.   + debian/rules: Install the etckeeper hook scripts in /etc/puppet.   + debian/README.Debian: add note about etckeeper integration.   + debian/control: the puppet package suggests etckeeper. * Create puppetmaster-passenger package to automatically setup the   puppetmaster to be run under mod passenger and apache2:   - create new puppetmaster-common package to share files between     puppetmaster (ie webrick) and puppetmaster-passenger.   - move puppetqd to puppetmaster-common.   - debian/puppet.conf: enable ssl options so that the default configuration     works out of the box under passenger. * debian/puppet-common.postinst: set permissions and ownership of puppet log   directory. * Move puppetmaster's Recommends to Suggests. [ Stig Sandbeck Mathisen ] * Recommend lsb-release (Closes: #593606) * Recommend debconf-utils (Closes: #593780) * ext/puppetlast: removed from upstream * Cherry-pick updated man pages from upstream	Stig Sandbeck Mathis...	2.6.1~rc3-1	13 years ago
38		[ Mathias Gug ] [ Mathias Gug ] * New upstream version:   - fix config.ru file to run puppetmaster as a rack application.     (Closes: #593557) * debian/puppet-common.postinst: set permissions and ownership of puppet log   directory. * debian/control:   + Don't suggest passenger and rack for puppetmaster since      puppetmaster-passenger is available now. * debian/puppetmaster-passenger.postinst:   + only generate puppet CA files if there isn't any ssl file already in     place.   + use local ssl options rather than ca ssl options to generate apache2     configuration.   + restart rather than reload apache2 during postinst as reload breaks ssl. * debian/rules:   + don't install rack helper directories since they're already listed in     the dirs file. * Merge from Debian git repository. Remaining changes:   - debian/control: Move puppetmaster's Recommends to Suggests. [ Stig Sandbeck Mathisen ] * Recommend lsb-release (Closes: #593606) * Recommend debconf-utils (Closes: #593780)	Mathias Gug	2.6.1~rc2-0ubuntu1	13 years ago
37		* Create puppetmaster-passenger package to automatically set... * Create puppetmaster-passenger package to automatically setup the   puppetmaster to be run under mod passenger and apache2:   - create new puppetmaster-common package to share files between     puppetmaster (ie webrick) and puppetmaster-passenger.   - move puppetqd to puppetmaster-common.   - debian/puppet.conf: enable ssl options so that the default configuration     works out of the box under passenger.	Mathias Gug	2.6.0-1ubuntu3	13 years ago
36		ext/rack/files/config.ru: Fix example config.ru to run puppe... ext/rack/files/config.ru: Fix example config.ru to run puppetmaster under mod-passenger.	Mathias Gug	2.6.0-1ubuntu2	13 years ago
35		* Merge from Debian experimental. Remaining changes: * Merge from Debian experimental. Remaining changes:    - etckeeper integration (server-lucid-puppet-etckeeper-integration):     + debian/etckeeper-commit-post, debian/etckeeper-commit-pre:        Call "etckeeper commit" before and after catalog runs.        Silently bail out if etckeeper is not available.     + debian/puppet.conf:        Call out to the etckeeper hooks using the new prerun_command,        and postrun_command hooks.     + debian/rules:        Install the etckeeper hook scripts in /etc/puppet.   - Fix init service provider to correctly check the status of services     using upstart jobs (LP: #551544).   - debian/control: Move puppetmaster's Recommends to Suggests.   - Rakefile: use system puppet.rb file to detect version. * spec/unit/application/apply_spec.rb: Fix test suite to use puppet    system library.	Mathias Gug	2.6.0-1ubuntu1	13 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1