- Resist directory traversal attacks through indirections
CVE-2011-3848 (bnc#721139)

- create user puppet not only for server package (bnc#623884)

- update to 0.25.4
* bugfixes
- create user puppet (fixes bnc#576453)

- update to 0.24.8

- add zypper.rb plugin by Leo Eraly

- update to 2.4.7
* Deprecate the NetInfo nameservice provider. Use directoryservice
instead
* Add macauthorization type
* Refactoring the thread-safety in Puppet::Util
* Removing the included testing gems; you must now install them
yourself
* Refactoring of SELinux functions to use native Ruby SELinux
interface
* Removing all mention of EPM, RPM, or Sun packages.
* Replaced SELInux calls to binaries with Ruby SELinux bindings
* Adding support to the user type for: profiles, auths, project,
key/value pairs (extension to Solaris RBAC support added in
0.24.6)
* Added a number of confines to package providers
* lots of bugfixes
- add sysconfig, firewall definitions, package