~ubuntu-branches/ubuntu/natty/puppet/natty-updates : changes

~ubuntu-branches/ubuntu/natty/puppet/natty-updates » Changes from revision 57

From Revision 57 to 38

Rev	Summary	Authors	Tags	Date
57	* SECURITY UPDATE: multiple July 2012 security issues * SECURITY UPDATE: multiple July 2012 security issues - debian/patches/2.6.4-Puppet-July-2012-CVE-fixes.patch: fix multiple security issues. Patch from upstream, with an additional fix to lib/puppet/reports/store.rb. - CVE-2012-3864: arbitrary file read on master from authenticated clients - CVE-2012-3865: arbitrary file delete or denial of service on master from authenticated clients - CVE-2012-3867: insufficient input validation for agent cert hostnames	Marc Deslauriers	2.6.4-2ubuntu2.10	11 years ago
56	* SECURITY UPDATE: Arbitrary file writes via predictable fil... * SECURITY UPDATE: Arbitrary file writes via predictable filename usage in appdmg and pkgdmg providers - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch - CVE-2012-1906 * SECURITY UPDATE: Arbitrary file reads via Filebucket REST requests - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch - CVE-2012-1986 * SECURITY UPDATE: Denial of service via Filebucket text/marshall support - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch - CVE-2012-1987 * SECURITY UPDATE: Arbitrary code execution via Filebucket requests - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch - CVE-2012-1988 * debian/patches/fix-unpredictable-hash-ordering-tests.patch: Fix testsuite failures caused by hash randomization in Ruby	Tyler Hicks	2.6.4-2ubuntu2.9	12 years ago
55	* SECURITY UPDATE: correctly drop group privileges * SECURITY UPDATE: correctly drop group privileges - debian/patches/CVE-2012-1053_CVE-2012-1054.patch - CVE-2012-1053 * SECURITY UPDATE: properly handle symlinks with Klogin - debian/patches/CVE-2012-1053_CVE-2012-1054.patch - CVE-2012-1054	Jamie Strandboge	2.6.4-2ubuntu2.8	12 years ago
54	* SECURITY UPDATE: fix access to remote resource when auth.c... * SECURITY UPDATE: fix access to remote resource when auth.conf is missing which was was reintroduced in 2.6.4-2ubuntu1. - debian/patches/CVE-2011-0528.patch: Disable remote ralsh by default - CVE-2011-0528	Jamie Strandboge	2.6.4-2ubuntu2.7	12 years ago
53	* REGRESSION FIX (LP: #881361) * REGRESSION FIX (LP: #881361) - debian/patches/CVE-2011-3872.patch: updated to fix regression with "puppetca" command.	Marc Deslauriers	2.6.4-2ubuntu2.6	12 years ago
52	* SECURITY UPDATE: puppet master impersonation via incorrect... * SECURITY UPDATE: puppet master impersonation via incorrect certificates - debian/patches/CVE-2011-3872.patch: refactor certificate handling. - Thanks to upstream for providing the patch. - CVE-2011-3872	Marc Deslauriers	2.6.4-2ubuntu2.5	12 years ago
51	* SECURITY UPDATE: k5login can overwrite arbitrary files as ... * SECURITY UPDATE: k5login can overwrite arbitrary files as root - debian/patches/CVE-2011-3869.patch: adjust type/k5login.rb to securely open the file before writing to it as root - CVE-2011-3869 * SECURITY UPDATE: didn't drop privileges before creating and changing permissions on SSH keys - debian/patches/CVE-2011-3870.patch: adjust ssh_authorized_key/parsed.rb to drop privileges before creating the ssh directory and setting permissions - CVE-2011-3870 * SECURITY UPDATE: fix predictable temporary filename in ralsh - debian/patches/CVE-2011-3871.patch: adjust application/resource.rb to use an unpredictable filename - CVE-2011-3871 * SECURITY UPDATE: file indirector injection, similar to CVE-2011-3848 - secure-indirector-file-backed-terminus-base-cla.patch: Since the indirector file backed terminus base class is only used by the test suite, remove it and update test cases to use a continuing class.	Jamie Strandboge	2.6.4-2ubuntu2.3	12 years ago
50	* SECURITY UPDATE: unauthenticated directory traversal allow... * SECURITY UPDATE: unauthenticated directory traversal allows writing of arbitrary files as puppet master - debian/patches/CVE-2011-3848.patch: update lib/puppet/indirector.rb, lib/puppet/indirector/ssl_file.rb, lib/puppet/indirector/yaml.rb, spec/unit/indirector/ssl_file.rb and spec/unit/indirector/yaml.rb to perform proper input validation. - CVE-2011-3848 - LP: #861182 * debian/patches/fix-rake-spec-missing-require.patch: allow 'rake spec' to run again	Jamie Strandboge	2.6.4-2ubuntu2.2	12 years ago
49	releasing version 2.6.4-2ubuntu2 releasing version 2.6.4-2ubuntu2	Dave Walker (Daviey)	2.6.4-2ubuntu2	13 years ago
48	debian/puppetmaster.default: Removed extra white space at EO... debian/puppetmaster.default: Removed extra white space at EOF	Dave Walker (Daviey)		13 years ago
47	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to set the location of the CRL in apache2 configuration. Fix apache2 configuration on upgrade as well (LP: #641001) - move all puppet dependencies to puppet-common since all the code actually located in puppet-common. - move libagueas from a recommend to a dependency.	Chuck Short	2.6.4-2ubuntu1	13 years ago
46	New upstream version. New upstream version.	Mathias Gug	2.6.3-0ubuntu1	13 years ago
45	New upstream version New upstream version	Mathias Gug	2.6.3~rc3-0ubuntu1	13 years ago
44	New upstream version New upstream version	Mathias Gug	2.6.3~rc2-0ubuntu1	13 years ago
43	* New upstream version * New upstream version * debian/control: - move all puppet dependencies to puppet-common since all the code is actually located in puppet-common. - move libaugeas from a recommend to a dependency.	Mathias Gug	2.6.3~rc1-0ubuntu1	13 years ago
42	debian/puppetmaster-passenger.postinst: Use cacrl instead of... debian/puppetmaster-passenger.postinst: Use cacrl instead of hostcrl to set the location of the CRL in apache2 configuration. Fix apache2 configuration on upgrade as well (LP: #641001).	Mathias Gug	2.6.1-0ubuntu2	13 years ago
41	[ Stig Sandbeck Mathisen ] [ Stig Sandbeck Mathisen ] * Add dependency on "facter" for "puppet-common" * Make sure the "puppet-common" package can be purged even when not fully installed (Closes: #596163) [ Mathias Gug ] * New upstream version.	Mathias Gug	2.6.1-0ubuntu1	13 years ago
40	[ Mathias Gug ] [ Mathias Gug ] * New upstream version: - Fix "Puppet standalone broken" (Closes: #594575) * test/lib/puppettest/fakes.rb: Fix puppettest to use puppet system library. [ Stig Sandbeck Mathisen ] * Fix "require" path for puppet queue.	Mathias Gug	2.6.1~rc4-0ubuntu1	13 years ago
39	[ Mathias Gug ] [ Mathias Gug ] * New upstream version: - fix config.ru file to run puppetmaster as a rack application. (Closes: #593557) * Fix test suite to run from a package install rather then from the source directory: + Rakefile: use system puppet.rb file to detect version. + spec/unit/application/apply_spec.rb: Fix test suite to use puppet system library. + spec/spec_helper.rb: disable gem. * Fix init service provider to correctly check the status of services using upstart jobs (Closes: #584481, LP: #551544). * etckeeper integration (Closes: #571127) [server-lucid-puppet-etckeeper-integration]: + debian/etckeeper-commit-post, debian/etckeeper-commit-pre: Call "etckeeper commit" before and after catalog runs. Silently bail out if etckeeper is not available. + debian/puppet.conf: Call out to the etckeeper hooks using the prerun_command and postrun_command hooks. + debian/rules: Install the etckeeper hook scripts in /etc/puppet. + debian/README.Debian: add note about etckeeper integration. + debian/control: the puppet package suggests etckeeper. * Create puppetmaster-passenger package to automatically setup the puppetmaster to be run under mod passenger and apache2: - create new puppetmaster-common package to share files between puppetmaster (ie webrick) and puppetmaster-passenger. - move puppetqd to puppetmaster-common. - debian/puppet.conf: enable ssl options so that the default configuration works out of the box under passenger. * debian/puppet-common.postinst: set permissions and ownership of puppet log directory. * Move puppetmaster's Recommends to Suggests. [ Stig Sandbeck Mathisen ] * Recommend lsb-release (Closes: #593606) * Recommend debconf-utils (Closes: #593780) * ext/puppetlast: removed from upstream * Cherry-pick updated man pages from upstream	Stig Sandbeck Mathis...	2.6.1~rc3-1	13 years ago
38	[ Mathias Gug ] [ Mathias Gug ] * New upstream version: - fix config.ru file to run puppetmaster as a rack application. (Closes: #593557) * debian/puppet-common.postinst: set permissions and ownership of puppet log directory. * debian/control: + Don't suggest passenger and rack for puppetmaster since puppetmaster-passenger is available now. * debian/puppetmaster-passenger.postinst: + only generate puppet CA files if there isn't any ssl file already in place. + use local ssl options rather than ca ssl options to generate apache2 configuration. + restart rather than reload apache2 during postinst as reload breaks ssl. * debian/rules: + don't install rack helper directories since they're already listed in the dirs file. * Merge from Debian git repository. Remaining changes: - debian/control: Move puppetmaster's Recommends to Suggests. [ Stig Sandbeck Mathisen ] * Recommend lsb-release (Closes: #593606) * Recommend debconf-utils (Closes: #593780)	Mathias Gug	2.6.1~rc2-0ubuntu1	13 years ago

Older »