[puppet/el6] Update Puppet to 2.6.18 for various security fixes

Michael Stahnke stahnma at fedoraproject.org
Thu Mar 14 01:02:09 UTC 2013


commit e49f4be1d291853f6e44edc2922de939500ebf29
Author: Michael Stahnke <stahnma at puppetlabs.com>
Date:   Mon Mar 11 16:27:47 2013 -0700

    Update Puppet to 2.6.18 for various security fixes
    
    BZ#920845
    
    Fixes for CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654
    CVE-2013-1655 CVE-2013-2274 CVE-2013-2275
    
    see puppetlabs.com/security for more information.
    
    Signed-off-by: Michael Stahnke <stahnma at puppetlabs.com>

 .gitignore               |    1 +
 puppet-2.6.17.tar.gz.asc |   18 ------------------
 puppet.spec              |    8 ++++++--
 sources                  |    3 ++-
 4 files changed, 9 insertions(+), 21 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 310dfe7..584b9dd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@
 *.tar.gz
 /.build*.log
 /puppet-*/
+/puppet-2.6.18.tar.gz.asc
diff --git a/puppet.spec b/puppet.spec
index 7fd5f07..f7eb4cc 100644
--- a/puppet.spec
+++ b/puppet.spec
@@ -12,8 +12,8 @@
 %global ruby_version    %(ruby -rrbconfig -e 'puts RbConfig::CONFIG["ruby_version"]')
 
 Name:           puppet
-Version:        2.6.17
-Release:        2%{?dist}
+Version:        2.6.18
+Release:        1%{?dist}
 Summary:        A network tool for managing many disparate systems
 License:        GPLv2
 URL:            http://puppetlabs.com
@@ -290,6 +290,10 @@ fi
 rm -rf %{buildroot}
 
 %changelog
+* Mon Mar 11 2013 Michael Stahnke <stahnma at puppetlabs.com> - 2.6.18-1
+- Fixes for CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654
+- and CVE-2013-1655 CVE-2013-2274 CVE-2013-2275
+
 * Thu Jul 19 2012 Todd Zullinger <tmz at pobox.com> - 2.6.17-2
 - Corrected CVE list, 2.6 is not affected by CVE-2012-3866
 
diff --git a/sources b/sources
index 121a978..4f15b97 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-da4783aa2b9d73be4ae9b9eea4ba7672  puppet-2.6.17.tar.gz
+f59a50d904e73d8793b18924f7e0443e  puppet-2.6.18.tar.gz
+47d257f7effaffcf925e232a77960a76  puppet-2.6.18.tar.gz.asc


More information about the scm-commits mailing list