Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisorycriticalFedoraFedora 25: Critical Security Fix for Unsafe YAML Deserialization
Security fix for CVE-2017-2295 and fix for using systemd service provider in a chroot.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-8ad8d1bd86 2017-05-31 20:01:49.742622 --------------------------------------------------------------------------------Name : puppet Product : Fedora 25 Version : 4.2.1 Release : 5.fc25 URL : https://www.puppet.com/ Summary : A network tool for managing many disparate systems Description : Puppet lets you centrally manage every important aspect of your system using a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, and files. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-2295 and fix for using systemd service provider in a chroot. --------------------------------------------------------------------------------References: [ 1 ] Bug #1452651 - CVE-2017-2295 puppet: Unsafe YAML deserialization https://bugzilla.redhat.com/show_bug.cgi?id=1452651 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade puppet' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jun 01, 2017
•Critical
Fedora
89
security advisoryFedorabug fixFedora 10: 2009-8494 Critical: Puppet Network Management Bug Fix Update
This update fixes a number of bugs in both the packaging and upstream source. See the package changelog and bug reports for complete details.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8494 2009-08-11 21:52:19 -------------------------------------------------------------------------------- Name : puppet Product : Fedora 10 Version : 0.24.8 Release : 4.fc10 URL : Summary : A network tool for managing many disparate systems Description : Puppet lets you centrally manage every important aspect of your system using a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, and files. -------------------------------------------------------------------------------- Update Information: This update fixes a number of bugs in both the packaging and upstream source. See the package changelog and bug reports for complete details. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 7 2009 Todd Zullinger - 0.24.8-4 - Fix status -p handling on older RHEL (#501577) - Fix condrestart when daemon's aren't running (#480600) - Fix timeout reading /proc/mounts (upstream #1963) - Fix permissions on /var/log/puppet (#495096) - Fix rails test for activerecord-2.3 (#515728) * Sun Jul 26 2009 Fedora Release Engineering - 0.24.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Jun 24 2009 Jeroen van Meeuwen - Fix permissions on /var/run/puppet/ (#495096) - Support initializing supplementary groups (#1806, #475201, Till Maas) - Own the correct vim directory - Move ext/ outside of doc datadir (rpmlint) - Require ruby(selinux) rather then libselinux-ruby (#507848) * Fri May 29 2009 Todd Zullinger - 0.24.8-2 - Make Augeas and SELinux requirements build time options - Install emacs mode andvim syntax files (#491437) - Include ext/ directory in %doc * Mon Mar 23 2009 Todd Zullinger - 0.24.8-1 - Update to 0.24.8 - Quiet output from %pre - Use upstream install script - Increase required facter version to > = 1.5 * Thu Feb 26 2009 Fedora Release Engineering - 0.24.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Tue Dec 16 2008 Todd Zullinger - 0.24.7-4 - Remove redundant useradd from %pre * Tue Dec 16 2008 Jeroen van Meeuwen - 0.24.7-3 - New upstream version - Set a static uid and gid (#472073, #471918, #471919) - Add a conditional requirement on libselinux-ruby for Fedora > = 9 - Add a dependency on ruby-augeas -------------------------------------------------------------------------------- References: [ 1 ] Bug #475201 - puppetmasterd does not initialize supplementary groups https://bugzilla.redhat.com/show_bug.cgi?id=475201 [ 2 ] Bug #480600 - puppet initscript: condrestart should call status https://bugzilla.redhat.com/show_bug.cgi?id=480600 [ 3 ] Bug #495096 - puppet SPEC file defines improper modes for some directories https://bugzilla.redhat.com/show_bug.cgi?id=495096 [ 4 ] Bug #501577 - `/etc/init.d/puppet status` returns errors https://bugzilla.redhat.com/show_bug.cgi?id=501577 [ 5 ] Bug #515728 - Storeconfigs broken https://bugzilla.redhat.com/show_bug.cgi?id=515728 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update puppet' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailinglist
Sep 11, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!