lp:ubuntu/precise/puppet

Branch merges

Propose for merging

1 branch proposed for merging into this one.

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

63. By Tyler Hicks on 2012-04-11

* SECURITY UPDATE: Arbitrary file writes via predictable filename usage in
  appdmg and pkgdmg providers (LP: #978708)
  - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
  - CVE-2012-1906
* SECURITY UPDATE: Arbitrary file reads via Filebucket REST requests
  - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
  - CVE-2012-1986
* SECURITY UPDATE: Denial of service via Filebucket text/marshall support
  - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
  - CVE-2012-1987
* SECURITY UPDATE: Arbitrary code execution via Filebucket requests
  - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
  - CVE-2012-1988
* SECURITY UPDATE: Arbritrary file writes via predictable telnet output log
  filename
  - debian/patches/CVE-2012-1906_CVE-2012-1986_to_CVE-2012-1989.patch
  - CVE-2012-1989
* debian/patches/puppet-12844: Re-fetch the patch from upstream since some
  missing pieces cause 'rake spec' to abort immediately

62. By Marc Cluet on 2012-03-16

[ Marc Cluet ]
* debian/patches/puppet-12844: Cherry picked patch from upstream
  2.7.12 to revert new agent lockfile behaviour as it breaks upgrades
  from versions < 2.7.10. This feature has been pushed out to
  puppet 3.x by upstream.
* debian/puppetmaster-passenger.postinst (LP: #948983)
  - Fixed rack directory location
  - Added proper enabling of apache2 headers mod
* debian/puppetmaster-passenger.postinst (LP: #950183)
  - Make sure we error if puppet config print doesn't work

[ James Page ]
* debian/puppetmaster-passenger.postinst:
  - Ensure upgrades from <= 2.7.11-1 fixup passenger apache
    configuration.

61. By Micah Anderson on 2012-02-23

* New upstream release
* Urgency set to high due to regressions in previous release
  and security vulnerabilities
* Execs when run with a user specified, but no group, get the root
  group. Similarly unexpected privileges are given to providers and
  types (egid remains as root), this is fixed with a patch from
  upstream (CVE-2012-1053)
* Fix Klogin write through symlink (CVE-2012-1054)

60. By Colin Watson on 2012-02-14

Use maintscript support in dh_installdeb rather than writing out
dpkg-maintscript-helper commands by hand. We now simply Pre-Depend on a
new enough version of dpkg rather than using 'dpkg-maintscript-helper
supports' guards, leading to more predictable behaviour on upgrades.

59. By Stig Sandbeck Mathisen on 2012-01-26

* New upstream release
* Update breaks/replaces for puppetmaster-common (Closes: #656962)
* Add systemd services for puppet agent and master

58. By Colin Watson on 2012-02-12

Use maintscript support in dh_installdeb rather than writing out
dpkg-maintscript-helper commands by hand. We now simply Pre-Depend on a
new enough version of dpkg rather than using 'dpkg-maintscript-helper
supports' guards, leading to more predictable behaviour on upgrades.

57. By Chuck Short on 2011-12-21

* Merge from Debian testing. Remaining changes:
  + Add 2 patches to fix incompatibility with Augeas 0.10.0:
    - augeas_saved_files
    - augeas_versioncmp
  + Change Maintainer according to policy

56. By Raphaël Pinson on 2011-12-20

* Add 2 patches to fix incompatibility with Augeas 0.10.0:
    - augeas_saved_files
    - augeas_versioncmp
* Change Maintainer according to policy.

55. By Stig Sandbeck Mathisen on 2011-10-22

* New upstream release (CVE-2011-3872)
* Remove cherry-picked "groupadd_aix_warning" patch
* Install all new manpages

54. By Marc Deslauriers on 2011-10-24

* SECURITY UPDATE: puppet master impersonation via incorrect certificates
  - debian/patches/CVE-2011-3872.patch: refactor certificate handling.
  - Thanks to upstream for providing the patch.
  - CVE-2011-3872