UbuntuUpdates.org

Package "vim-puppet"

Name: vim-puppet

Description:

syntax highlighting for puppet manifests in vim
Latest version: 2.7.11-1ubuntu2.7
Release: precise (12.04)
Level: updates
Repository: universe
Head package: puppet
Homepage: http://projects.puppetlabs.com/projects/puppet

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "vim-puppet"

All arch deb package
APT INSTALL

Other versions of "vim-puppet" in Precise

Repository Area Version
base universe 2.7.11-1ubuntu2
security universe 2.7.11-1ubuntu2.7
PPA: Puppet repo 3.8.7-1puppetlabs1

Changelog

Version: 2.7.11-1ubuntu2.2 2013-03-12 22:07:02 UTC

  puppet (2.7.11-1ubuntu2.2) precise-security; urgency=low

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/security-mar-2013.patch: upstream patch to fix
      multiple security issues.
    - CVE-2013-1640 - Remote code execution on master from authenticated clients
    - CVE-2013-1652 - Insufficient input validation
    - CVE-2013-1653 - Remote code execution
    - CVE-2013-1654 - Protocol downgrade
    - CVE-2013-1655 - Unauthenticated remote code execution risk
    - CVE-2013-2275 - Incorrect default report ACL
 -- Marc Deslauriers <email address hidden> Mon, 11 Mar 2013 12:32:11 -0400
Source diff to previous version
CVE-2013-1640 RESERVED
CVE-2013-1652 RESERVED
CVE-2013-1653 RESERVED
CVE-2013-1654 RESERVED
CVE-2013-1655 RESERVED
CVE-2013-2275 RESERVED

Version: 2.7.11-1ubuntu2.1 2012-07-12 19:06:57 UTC

  puppet (2.7.11-1ubuntu2.1) precise-security; urgency=low

  * SECURITY UPDATE: Multiple July 2012 security issues
    - debian/patches/2.7.17-Puppet-July-2012-CVE-fixes.patch: upstream
      patch to fix multiple security issues.
    - CVE-2012-3864: arbitrary file read on master from authenticated
      clients
    - CVE-2012-3865: arbitrary file delete or denial of service on master
      from authenticated clients
    - CVE-2012-3866: last_run_report.yaml report file is world readable and
      leads to arbitrary file read on master by an agent
    - CVE-2012-3867: insufficient input validation for agent cert hostnames
 -- Marc Deslauriers <email address hidden> Tue, 10 Jul 2012 07:58:03 -0400


About   -   Send Feedback to @ubuntu_updates