LogoopenSUSE Build Service > Request 196668
Sign Up | Log In

Request 196668 (revoked)

test

Submit package home:-miska-:virtio / puppet (revision 59f0...317) to package home:-miska-:arm / puppet-test

[-] [+] Added puppet.changes
[-] [+] Added puppet.spec ^
[-] [+] Added puppet-2.6.6-yumconf.diff ^
[-] [+] Added puppet-3.0.2-init.patch ^
Added puppet-3.0.2.tar.gz ^
[-] [+] Added puppet.fw ^
[-] [+] Added puppet.sysconfig ^
[-] [+] Added puppetmaster.fw ^
[-] [+] Added puppetmasterd.sysconfig ^

Mentioned Issues (18)

CVE-2011-3848
Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN i
CVE-2011-3872
Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certific
CVE-2012-3864
Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.
CVE-2012-3865
Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the p
CVE-2012-3866
lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master serv
CVE-2012-3867
lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier f
boo#465778 Anna Maresova anicka Closed
Puppet package has issues.
boo#576453 Anna Maresova anicka Closed
puppet-server package fails to create a puppet user and group
boo#620808 Anna Maresova anicka Closed
puppet/puppet-server misbuilt
boo#623884 Anna Maresova anicka Closed
Missing puppet user when installing puppet package
boo#667867 Vítězslav Čížek vitezslav_cizek Closed
VUL-0: puppet: information disclosure and integrity violation of resources in Puppet nodes exploitable by auth'ed entities only
boo#683441 Vítězslav Čížek vitezslav_cizek Closed
Puppet does not log to /var/log/puppet correctly
boo#694825 Vítězslav Čížek vitezslav_cizek Closed
Incorrect firewall rule in puppet installation
boo#714649 Wojtek Dziewięcki vdziewiecki Closed
puppet: use of /var/lock/subsys unsupported
boo#770827 Virtual SUSE Security Team _security_team Closed
VUL-1: CVE-2012-3866: puppet: last_run_report.yaml left world-readable
boo#770828 Virtual SUSE Security Team _security_team Closed
VUL-0: CVE-2012-3864: puppet: authenticated clients can read arbitrary files via a flaw in puppet master
boo#770829 Virtual SUSE Security Team _security_team Closed
VUL-0: CVE-2012-3865: puppet: arbitrary file delete / Denial of Service on Puppet Master by authenticated clients
boo#770833 Virtual SUSE Security Team _security_team Closed
VUL-1: CVE-2012-3867: puppet: insufficient input validation for agent certificate names

There's nothing to be done right now

Request History

Michal Hrusecky -miska- created request about 3 years ago
test
Michal Hrusecky -miska- Request got a new review request over 2 years ago
Being evaluated by staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Request got reviewed over 2 years ago
Passed staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Review got accepted over 2 years ago
Passed staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Request got a new review request over 2 years ago
Being evaluated by staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Request got reviewed over 2 years ago
Passed staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Review got accepted over 2 years ago
Passed staging project "home:-miska-:Staging:test"
Michal Hrusecky -miska- Request got revoked almost 2 years ago
Please add a comment

Comments for request 196668 (1)

Michal Hrusecky -miska- wrote almost 3 years ago

test

Testing comments