[Pkg-puppet-devel] [SCM] Puppet packaging for Debian annotated tag, debian/0.24.5-3+lenny2, created. debian/0.24.5-3+lenny2

Stig Sandbeck Mathisen ssm at debian.org
Wed Oct 26 08:18:55 UTC 2011


The annotated tag, debian/0.24.5-3+lenny2 has been created
        at  47a4f632c746af81955321165fe83d89ca27eeeb (tag)
   tagging  c1cef6edf4ae9bee23671b773c6e6d12ae7fb32a (commit)
  replaces  debian/0.24.5-2
 tagged by  Stig Sandbeck Mathisen
        on  Sat Oct 22 17:08:35 2011 +0000

- Shortlog ------------------------------------------------------------
Release puppet 0.24.5-3+lenny2 for Debian lenny
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEABECAAYFAk6i+JMACgkQQONU2fom4u4jIQCgkLDyYSEy9zQ1zCLanMQvRCUb
aCMAoI2/HPAhvkygKyUUiASjmNPcgn3y
=jCeb
-----END PGP SIGNATURE-----

Micah Anderson (7):
      Distribute the filebucket program (Closes: #499999)
      Finish the fix for distributing the filebucket binary
      fix for directory traversal attacks through indirection (CVE-2011-3848)
      Fix K5login content attack (CVE-2011-3869)
      Fix SSH authorized keys symlink attack (CVE-2011-3870)
      add changelog for lenny-security release for DSA-2314
      fix changelog for lenny

Nick Lewis (1):
      Disable the certdnsnames setting

Stig Sandbeck Mathisen (1):
      Fix SSL impersonation attack by disabling "certdnsnames" (CVE-2011-3848)

Thom May (3):
      Set wait for cert timeout to 5 secs, to avoid resource abuse (Closes: #509566)
      Place vim syntax in the correct location (LP: #181960)
      create the syntax directory

-----------------------------------------------------------------------

-- 
Puppet packaging for Debian



More information about the Pkg-puppet-devel mailing list