Debian Package Tracker

general

source: mcollective (source, utils)
version: 2.6.0+dfsg-2.1
maintainer: Puppet Package Maintainers (archive) [DMD]
uploaders: Jonas Genannt [DMD] – Micah Anderson [DMD]
arch: all
std-ver: 3.9.6
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.0+dfsg-2
oldstable: 2.6.0+dfsg-2.1
unstable: 2.6.0+dfsg-2.1

versioned links

2.0.0+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.0+dfsg-2.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

mcollective
mcollective-client
mcollective-common
mcollective-doc

action needed

A new upstream version is available: 2.10.4

high

A new upstream version 2.10.4 is available, you should consider packaging it.

Created: 2017-01-17 Last update: 2017-06-22 13:24

1 security issue in sid

high

There is 1 open security issue in sid.

1 important issue:

CVE-2016-2788: MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

Please fix it.

Created: 2016-08-10 Last update: 2017-03-15 07:14

3 security issues in wheezy

high

There are 3 open security issues in wheezy.

1 important issue:

CVE-2016-2788: MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

2 issues skipped by the security teams:

CVE-2014-3251: The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to establish unauthorized Mcollective connections via unspecified vectors related to a race condition.
CVE-2014-3248: Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.

Please fix them.

Created: 2015-07-12 Last update: 2017-03-15 07:14

1 security issue in jessie

high

There is 1 open security issue in jessie.

1 important issue:

CVE-2016-2788: MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

Please fix it.

Created: 2016-08-10 Last update: 2017-03-15 07:14

lintian reports 1 error and 4 warnings

high

Lintian reports 1 error and 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-09 Last update: 2016-10-24 06:55

The package has not entered testing even though the delay is over

normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2017-02-24 Last update: 2017-06-22 13:22

Multiarch hinter reports 1 issue(s)

low

There are issues with the multiarch metadata for this package.

mcollective-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2017-06-22 13:35

testing migrations

excuses:
- Migration status: BLOCKED: Rejected/introduces a regression (please see below)
- 913 days old (needed 5 days)
- mcollective has new bugs!
- Updating mcollective introduces new bugs: #850968
- Piuparts tested OK - https://piuparts.debian.org/sid/source/m/mcollective.html
- Not considered

news

[rss feed]

[2017-02-23] mcollective REMOVED from testing (Debian testing watch)
[2014-12-27] mcollective 2.6.0+dfsg-2.1 MIGRATED to testing (Britney)
[2014-12-21] Accepted mcollective 2.6.0+dfsg-2.1 (source all) into unstable (Michael Gilbert)
[2014-12-15] mcollective 2.6.0+dfsg-2 MIGRATED to testing (Britney)
[2014-12-04] Accepted mcollective 2.6.0+dfsg-2 (source all) into unstable (Jonas Genannt)
[2014-10-25] mcollective 2.6.0+dfsg-1 MIGRATED to testing (Britney)
[2014-10-14] Accepted mcollective 2.6.0+dfsg-1 (source all) into unstable (Jonas Genannt)
[2014-09-06] mcollective 2.5.2+dfsg-1 MIGRATED to testing (Britney)
[2014-08-26] Accepted mcollective 2.5.2+dfsg-1 (source all) into unstable (Jonas Genannt)
[2013-10-05] mcollective 2.0.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2013-09-24] Accepted mcollective 2.0.0+dfsg-4 (source all) (Jonas Genannt)
[2013-09-06] mcollective 2.0.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2013-08-26] Accepted mcollective 2.0.0+dfsg-3 (source all) (Jonas Genannt)
[2012-07-11] mcollective 2.0.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2012-06-30] Accepted mcollective 2.0.0+dfsg-2 (source all) (Jonas Genannt)
[2012-06-07] mcollective 2.0.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2012-05-27] Accepted mcollective 2.0.0+dfsg-1 (source all) (Jonas Genannt)
[2011-11-12] mcollective 1.2.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2011-11-01] Accepted mcollective 1.2.1+dfsg-2 (source all) (Jonas Genannt) (signed by: Micah Anderson)
[2011-09-24] mcollective 1.2.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2011-09-13] Accepted mcollective 1.2.1+dfsg-1 (source all) (Jonas Genannt) (signed by: Micah Anderson)

bugs [bug history graph]

all: 3
RC: 1
I&N: 2
M&W: 0
F&P: 0

links

homepage
lintian (1, 4)
buildd: logs, clang
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.6.0+dfsg-2.1
1 bug