-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 09 Oct 2011 10:46:15 -0400 Source: puppet Binary: puppet puppetmaster Architecture: source all Version: 0.24.5-3+lenny1 Distribution: oldstable-security Urgency: high Maintainer: Puppet Package Maintainers Changed-By: Micah Anderson Description: puppet - centralised configuration management for networks puppetmaster - centralised configuration management control daemon Changes: puppet (0.24.5-3+lenny1) oldstable-security; urgency=high . * Fix SSH authorized keys symlink attack (CVE-2011-3870) * Fix K5login content attack (CVE-2011-3869) * Resist directory traversal attacks (CVE-2011-3848) Checksums-Sha1: 08bbc58214cc6bd8e20e5ac96a3224e3e49784b6 1942 puppet_0.24.5-3+lenny1.dsc 5e03c837c23123e10a8e58774dcbb44a7c34278b 1221145 puppet_0.24.5.orig.tar.gz 96aa52577ff5c8ddf748fb2ce4cfdbb87cc16570 13412 puppet_0.24.5-3+lenny1.diff.gz 2678cb8a7aed36137a1bee83c167e4c926ffd4a0 464336 puppet_0.24.5-3+lenny1_all.deb a875c144f71ceddbdcb47a33e6a35c5e6058d954 38450 puppetmaster_0.24.5-3+lenny1_all.deb Checksums-Sha256: c8e96361381adf19651778364d4134fad5ce060bc03ba2c01692523629574c45 1942 puppet_0.24.5-3+lenny1.dsc 8926c6ca6039864dedb258767aa9d8dff5eda0508c2697cdef09313c466315ba 1221145 puppet_0.24.5.orig.tar.gz 11814645a1af546fbe226cfec89609fe4076d22c02929bfe4a92276730629d1f 13412 puppet_0.24.5-3+lenny1.diff.gz 6cd87eb4b932e1d065b9abea75a08193ea7360a569c5aefd9a4800703780f77f 464336 puppet_0.24.5-3+lenny1_all.deb 96f29682cd050da11384018d6296db3c6596a332844dac0b8ee64fe9ecb38a2e 38450 puppetmaster_0.24.5-3+lenny1_all.deb Files: 95bcc1f1edb77c793a42ae60f4227373 1942 admin optional puppet_0.24.5-3+lenny1.dsc da34129291327d79e729ec06920e6bb0 1221145 admin optional puppet_0.24.5.orig.tar.gz a3669dd8749bf5acc6ee5bf576330d9d 13412 admin optional puppet_0.24.5-3+lenny1.diff.gz 35a01dfe53493b2d690baa7cb3fad7d6 464336 admin optional puppet_0.24.5-3+lenny1_all.deb 6635bc98f4db7db165c35cdd8372a2fa 38450 admin optional puppetmaster_0.24.5-3+lenny1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCgAGBQJOkb3dAAoJEIy/mjIoYaeQpUwP/0Rdmb/5vxElLDyju6JYUlCp 4nW6QITI7DqMgiJeAXTrK5nGlTiiivVJVfOA5nRX1nwX4i8t273h5tlfNEfP2SGK jj0C6ndMe7j467+rpN+RC427GRD9o2vROr6ev7pe6M6dd5Y7BPM7Wfx5avxmBHus o8+NGaxVcOcd4Qes4+Hq+mkV3+RKlQOCCSYYnXQPTR3IcZAudanQMKKsRzQ47XKC C4etYbUrwfSo6up0ADqoDuiUcILuKI1EyK/EhjDRwjCzDeQ5PUlA/GJHy2nHTJK3 /EoZ3rW+rTNyhOPw7WQmgCPw0fhMJeletYAWDJOl9h4wsyCAuWnTy1LYeF+AMExQ wOxWVb3BIu2KYSKwxU7ekPWrSTWlwC+iRKKtuFnu88Mdu/yDAwDk1ijIs7y2ShR/ k16vVvyJM292knUbKhwMn/kYMr6m8Ijtdrjv4Ws3blCEFsvU1obEM9Pa2+xegy4A TWzQ+bUGywawGQHtBBZt7XrBty0Zuwfg9hRYeYp4FLjZt7Q/FeCuoKT0Z9/0W3wh +B6xyOmQ+gIFWXMpyOUtGHdYFPedbB9DGAU+CgCFOLpxv10C45Aer1MvmwgcB+sP oDHAHdn1SbyRX0m+w5Gebu2xoNYspw5FuvxF9OV7ASEYdLaVEIxB8ql2KCTPYp9o ps+GMJXF4dB2GZtxQVk+ =7F0j -----END PGP SIGNATURE-----