SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG

 
 
Changelog for puppet-3.8.5-15.24.1.x86_64.rpm :

* Thu May 21 2020 kstreitovaAATTsuse.com- Add (noreplace) tags to the %config files so that user defined configuration files are not overwritten during package updates [bsc#1171711]
* Mon Mar 30 2020 kstreitovaAATTsuse.com- add puppet-3.8.5-CVE-2020-7942.patch that adds a deprecation warning for \'strict_hostname_checking = false\' variable. While set to false it causes arbitrary catalog retrieval so users should change it to true and adjust their environment accordingly. [bsc#1167645], [CVE-2020-7942]
* Tue Feb 13 2018 kstreitovaAATTsuse.com- add puppet-3.8.5-CVE-2017-10689.patch to reset permissions when unpacking tar in PMT. When using minitar, files are unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions [bsc#1080288], [CVE-2017-10689]
* Fri Sep 08 2017 kstreitovaAATTsuse.com- add puppet-3.8.5-require-hiera-1.2.1.patch to force puppet to use hiera 1.2.1 when more hiera versions are installed in parallel [bsc#1046263]
* Thu Jul 13 2017 kstreitovaAATTsuse.com- add puppet-3.8.5-CVE-2017-2295.patch to fix a security vulnerability where an attacker could force YAML deserialization in an unsafe manner, which would lead to remote code execution. In default, this update breaks a backwards compatibility with Puppet agents older than 3.2.2 as the SLE12 master doesn\'t support other fact formats than pson in default anymore. In order to allow users to continue using their SLE12 master/SLE11 agents setup and fix CVE-2017-2295 for the others, a new puppet master boolean option \"dangerous_fact_formats\" was added. When it\'s set to true it enables using dangerous fact formats (e.g. YAML). When it\'s set to false, only PSON fact format is accepted. [bsc#1040151], [CVE-2017-2295]
* Tue May 16 2017 kstreitovaAATTsuse.com- add puppet-3.8.5-non_ASCII_user_comment.patch to fix non-ASCII user comment with ruby >= 2.1 [bnc#971223]- replace the greps with %fillup-only macros to update the sysconfig files properly [bsc#995975]
* Sun Jan 15 2017 kstreitovaAATTsuse.com- puppet 3 buildrequires and requires rubygem-hiera-1 now [fate#321116]
* Tue Feb 02 2016 kstreitovaAATTsuse.com- update to 3.8.5:
* release notes: http://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html http://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
* [bsc#964437], [fate#319493]
* bug [bsc#951553] is already fixed in puppet 3.7.3- add 3.8.5-systemd_default_service_provider.patch to make systemd the default service provider for SLES 12 [bsc#927946]
* Thu Jun 26 2014 mrueckertAATTsuse.de- dont require package names. require rubygem() symbols instead. (bnc#884509)
* Tue Jun 24 2014 mrueckertAATTsuse.de- also have puppetmasterd.sysconfig in the sources list
 
ICM