FEDORA-EPEL-2013-0657 — security update for puppet

obsolete

FEDORA-EPEL-2013-0657 created by stahnma 10 years ago for Fedora EPEL 6

Updates to EPEL for Puppet 2.6 for security issues disclosed 13-MAR-2013 from Puppet Labs.

This update has been submitted for testing by stahnma.

This update is currently being pushed to the Fedora EPEL 6 testing updates repository.

This update has been pushed to testing

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

BZ#919770 CVE-2013-1654 Puppet: SSL protocol downgrade

BZ#919774 CVE-2013-1653 Puppet: kick connection HTTP PUT request arbitrary code execution

BZ#919775 CVE-2013-1655 Puppet: Master code loading Ruby symbols vulnerability

BZ#919783 CVE-2013-1640 Puppet: catalog request code execution

BZ#919784 CVE-2013-1652 Puppet: HTTP GET request catalog retrieval

BZ#919785 CVE-2013-2275 Puppet: default auth.conf allows authenticated node to submit a report for any other node

BZ#920845 CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654 CVE-2013-1655 CVE-2013-2275 puppet various flaws [fedora-all]

puppet-2.6.18-1.el6

None