-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Feb 2012 12:08:43 -0500 Source: puppet Binary: puppet puppetmaster puppet-common vim-puppet puppet-el puppet-testsuite Architecture: source all Version: 2.6.2-5+squeeze4 Distribution: stable-security Urgency: high Maintainer: Puppet Package Maintainers <pkg-puppet-devel@lists.alioth.debian.org> Changed-By: Micah Anderson <micah@debian.org> Description: puppet - Centralized configuration management - agent startup and compatib puppet-common - Centralized configuration management puppet-el - syntax highlighting for puppet manifests in emacs puppet-testsuite - Centralized configuration management - test suite puppetmaster - Centralized configuration management - master startup and compati vim-puppet - syntax highlighting for puppet manifests in vim Changes: puppet (2.6.2-5+squeeze4) stable-security; urgency=high . * Execs when run with a user specified, but no group, get the root group. Similarly unexpected privileges are given to providers and types (egid remains as root), this is fixed with a patch from upstream (CVE-2012-1053) * Fix Klogin write through symlink (CVE-2012-1054) Checksums-Sha1: afafa6224e9064af99c2dbf2ff2c268019feaaba 2175 puppet_2.6.2-5+squeeze4.dsc ba7622dc92d62aadcdd4f53bf43eadd20225e178 134552 puppet_2.6.2-5+squeeze4.debian.tar.gz 77ab3618977c4427b7fc3bd5c6c839f0c62d391d 209854 puppet_2.6.2-5+squeeze4_all.deb d6278a21d267688560484239aef3004f0e6e2ee6 213114 puppetmaster_2.6.2-5+squeeze4_all.deb 3b0fcfb0024e24f2cd00910f8d2ef1912d4370be 741446 puppet-common_2.6.2-5+squeeze4_all.deb 775ecfba784f71e1bdfef1edca977304b0575c01 200452 vim-puppet_2.6.2-5+squeeze4_all.deb 96d143e0bc0e268789b2d2c3e1f75e6fdfebac09 202638 puppet-el_2.6.2-5+squeeze4_all.deb dde2d29225e4bfccb691ec5d9b7fc2fc17469d7e 883014 puppet-testsuite_2.6.2-5+squeeze4_all.deb Checksums-Sha256: 7382ee37418da3a2e192fe26bd4f1330f86bc27874a50cf88aa19698d8b6d7d6 2175 puppet_2.6.2-5+squeeze4.dsc dbad73f65f1e201b59b52edd45c1edc93ecba278577535d43cc5232d1d99e889 134552 puppet_2.6.2-5+squeeze4.debian.tar.gz 5bad45b7d2e1ae4447a3dde49d05044aca93ead99e36c4c60a5fba8227096101 209854 puppet_2.6.2-5+squeeze4_all.deb a49550173a918be6a5b0f892cc1ec5f5c25db34ba9da1b05dbde67af1750543e 213114 puppetmaster_2.6.2-5+squeeze4_all.deb a318065bbf0509d0272f5563f8087f0a29b0b354e3e077f2393c2c5c8cb9a0dc 741446 puppet-common_2.6.2-5+squeeze4_all.deb dc2946e7402c8f0eb4471b3c0059c870e8860efe7fb0911d4a65a81832435d09 200452 vim-puppet_2.6.2-5+squeeze4_all.deb 6e1b3e90e0f745d17a70981792a17f290bafc85c7ed8987f150972d3177cd5bf 202638 puppet-el_2.6.2-5+squeeze4_all.deb d2f22d383742561cae571b0cd568eab6a7a797db5dab0623a206f965ce5be128 883014 puppet-testsuite_2.6.2-5+squeeze4_all.deb Files: 82c05c9acebacc9dbb0f07919abbae11 2175 admin optional puppet_2.6.2-5+squeeze4.dsc 49fea8c9516bae23515f62c8bef1d83f 134552 admin optional puppet_2.6.2-5+squeeze4.debian.tar.gz 903825160f90cf960955a1b412f8e702 209854 admin optional puppet_2.6.2-5+squeeze4_all.deb e5e09d16ca7200ca88709a18efd75c30 213114 admin optional puppetmaster_2.6.2-5+squeeze4_all.deb 462995c0eee3841ced50002b2d756b6f 741446 admin optional puppet-common_2.6.2-5+squeeze4_all.deb ff584832b76b38abfa1b46a01bd50afb 200452 admin optional vim-puppet_2.6.2-5+squeeze4_all.deb 8620b432df51ab4a9390d0888df506a2 202638 admin optional puppet-el_2.6.2-5+squeeze4_all.deb e8834ea54d2e76faf04cbccb9455e5cb 883014 admin optional puppet-testsuite_2.6.2-5+squeeze4_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJPSvOcAAoJEIy/mjIoYaeQrIMP/29xUG+ewl9KcnnDC6PmKlTr qfyzc3x7/Lhr/n4idX+K0S8B2y0MFtGFhTooPeS0n5Hkeejpjr49h06fjx+5cgBG tjoWfamM5f4Z0/oQV26L9+6ZlPjvZMKSFX4qqN5Jfg2hVM+/SsV5eFdEibA/1jvq 7iCwPuslsBH3ssaCcOjC8eLSM9VDfntqXZSQZxzAoFrSRvNgsvyW/X5CGxSP8dem X0R0n/0MYpYsf622k6eOZeiRt0qnlJ7vENlqX7dx08CA/j8uGmYN+E6aWQe3T1mj taWw0wjJmtl2vZWzvqYRedtqhHC65f6M2QZXFU6Z4bWhPG8SPMb796Qfy8rXvkKJ DHQf9SBrnukEuF7qfE0saM15aDMe00eMyoGLrlq0jY/q+chClIjqdHzUY/BMl0yp HDbfF2+Xh378lsUtJ1hCbGEsN1KRIcTGdeDnnsIIZAEuVNSdfue3hC8fTgBWA3RB PYyyj7rL/8lkkYqOA8VzQXmltO8aA9QrDI6a4JZSyxX2iT+IHwyJvVKlxy6Nt7CK 7d9nrwE/DUHpOkNPh95V2UAZvYLY2tMe0kV6MKeAUzcHW9VU08bKvAd+LKVU/sSb OGbStLcuuxgAjhuBZw+Vj8bJLI9ijh3mig/tVByEq59K7t4kD3NA4BhXm6QJbUhD iVYj2b+2aXzgTrmoFs5u =GgGO -----END PGP SIGNATURE----- Accepted: puppet-common_2.6.2-5+squeeze4_all.deb to main/p/puppet/puppet-common_2.6.2-5+squeeze4_all.deb puppet-el_2.6.2-5+squeeze4_all.deb to main/p/puppet/puppet-el_2.6.2-5+squeeze4_all.deb puppet-testsuite_2.6.2-5+squeeze4_all.deb to main/p/puppet/puppet-testsuite_2.6.2-5+squeeze4_all.deb puppet_2.6.2-5+squeeze4.debian.tar.gz to main/p/puppet/puppet_2.6.2-5+squeeze4.debian.tar.gz puppet_2.6.2-5+squeeze4.dsc to main/p/puppet/puppet_2.6.2-5+squeeze4.dsc puppet_2.6.2-5+squeeze4_all.deb to main/p/puppet/puppet_2.6.2-5+squeeze4_all.deb puppetmaster_2.6.2-5+squeeze4_all.deb to main/p/puppet/puppetmaster_2.6.2-5+squeeze4_all.deb vim-puppet_2.6.2-5+squeeze4_all.deb to main/p/puppet/vim-puppet_2.6.2-5+squeeze4_all.deb