| patch |
summary |
view |
raw |
| 0001-Resist-directory-traversal-attacks-2.6.x.patch |
lib/puppet/indirector.rb | 7 +++++++
lib/puppet/indirector/ssl_file.rb | 6 +++++-
lib/puppet/indirector/yaml.rb | 5 +++++
spec/unit/indirector/ssl_file_spec.rb | 19 +++++++++++++++++++
spec/unit/indirector/yaml_spec.rb | 14 ++++++++++++++
5 files changed, 50 insertions(+), 1 deletion(-)
|
view
|
download
|
| fix_logcheck |
ext/logcheck/puppet | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| debianize_apache2.conf |
ext/rack/files/apache2.conf | 45 ++++++++++++++++++++++++++++++++------------
1 file changed, 33 insertions(+), 12 deletions(-)
|
view
|
download
|
| 2.6.x-9791-TOCTOU-in-ssh-auth-keys-type.patch |
lib/puppet/provider/ssh_authorized_key/parsed.rb | 19 ++++++++++---------
spec/unit/provider/ssh_authorized_key/parsed_spec.rb | 16 ++++++++--------
2 files changed, 18 insertions(+), 17 deletions(-)
|
view
|
download
|
| 2.6.x-9792-Predictable-temporary-filename-in-ralsh.patch |
lib/puppet/application/resource.rb | 27 +++++++++++++++++----------
1 file changed, 17 insertions(+), 10 deletions(-)
|
view
|
download
|
| 2.6.x-9793-secure-indirector-file-backed-terminus-base-cla.patch |
lib/puppet/indirector/file.rb | 79 --------------
spec/unit/indirector/file_spec.rb | 181 ----------------------------------
spec/unit/indirector/terminus_spec.rb | 6 -
3 files changed, 3 insertions(+), 263 deletions(-)
|
view
|
download
|
| 0008-5552-Clean-up-subcommand-handling-inside-puppet-cert.patch |
lib/puppet/application/cert.rb | 32 +++++++++++++-------
spec/unit/application/cert_spec.rb | 58 ++++++++++++++++++++++++++++---------
2 files changed, 65 insertions(+), 25 deletions(-)
|
view
|
download
|
| 0009-6928-backport-Symbol-to_proc-for-Ruby-1.8.7.patch |
lib/puppet/util/monkey_patches.rb | 55 ++++++++++++++++++++++++++++++++++++++
1 file changed, 55 insertions(+)
|
view
|
download
|
| 0010-6928-Don-t-blow-up-when-the-method-is-undefined.patch |
lib/puppet/util/monkey_patches.rb | 10 ++++------
1 file changed, 4 insertions(+), 6 deletions(-)
|
view
|
download
|
| 0011-2848-Set-certdnsnames-values-into-the-CSR.patch |
lib/puppet/ssl/certificate_request.rb | 17 ++++++++++++++
spec/unit/ssl/certificate_request_spec.rb | 36 +++++++++++++++++++++++++++++-
2 files changed, 52 insertions(+), 1 deletion(-)
|
view
|
download
|
| 0012-2848-extract-the-subjectAltName-value-from-the-CSR.patch |
lib/puppet/ssl/certificate_request.rb | 72 ++++++++++++++++++++++++++++++
spec/unit/ssl/certificate_request_spec.rb | 28 +++++++----
2 files changed, 90 insertions(+), 10 deletions(-)
|
view
|
download
|
| 0013-2848-Reject-unknown-all-extensions-on-the-CSR.patch |
lib/puppet/ssl/certificate_authority.rb | 19 ++++++++++++++++++-
spec/unit/ssl/certificate_authority_spec.rb | 10 +++++++++-
2 files changed, 27 insertions(+), 2 deletions(-)
|
view
|
download
|
| 0014-2848-Rewrite-SSL-Certificate-Factory-fixing-subjectA.patch |
lib/puppet/ssl/certificate_authority.rb | 3
lib/puppet/ssl/certificate_factory.rb | 197 +++++++++++++++-------------
spec/unit/ssl/certificate_authority_spec.rb | 33 ++--
spec/unit/ssl/certificate_factory_spec.rb | 162 +++++++++++++----------
4 files changed, 216 insertions(+), 179 deletions(-)
|
view
|
download
|
| 0015-7224-Add-a-helper-to-Puppet-SSL-Certificate-to-retri.patch |
lib/puppet/ssl/certificate.rb | 6 ++++++
spec/unit/ssl/certificate_spec.rb | 32 ++++++++++++++++++++++++++++++++
2 files changed, 38 insertions(+)
|
view
|
download
|
| 0016-2848-List-subject-alt-names-in-output-of-puppet-cert.patch |
lib/puppet/ssl/certificate_authority/interface.rb | 72 +++++++++--
spec/unit/ssl/certificate_authority/interface_spec.rb | 116 +++++++++++-------
2 files changed, 131 insertions(+), 57 deletions(-)
|
view
|
download
|
| 0017-2848-CSR-subjectAltNames-handling-while-signing.patch |
lib/puppet/application/cert.rb | 15 ++-
lib/puppet/defaults.rb | 2
lib/puppet/ssl/certificate_authority.rb | 87 ++++++++++++++----
lib/puppet/ssl/certificate_authority/interface.rb | 11 +-
lib/puppet/ssl/certificate_request.rb | 8 -
lib/puppet/ssl/host.rb | 4
lib/puppet/util/command_line/puppetca | 25 ++++-
spec/unit/ssl/certificate_authority/interface_spec.rb | 29 +++---
spec/unit/ssl/certificate_authority_spec.rb | 47 ++++++++-
spec/unit/ssl/certificate_factory_spec.rb | 19 ++-
spec/unit/ssl/certificate_request_spec.rb | 31 +++++-
spec/unit/ssl/certificate_spec.rb | 4
spec/unit/ssl/host_spec.rb | 2
13 files changed, 213 insertions(+), 71 deletions(-)
|
view
|
download
|
| 0018-2848-Use-certdnsnames-when-bootstrapping-a-local-mas.patch |
lib/puppet/ssl/certificate_authority.rb | 6 +-
lib/puppet/ssl/host.rb | 31 ++++++++++-
spec/unit/ssl/certificate_authority_spec.rb | 77 +++++++++++++++++++++++++++-
spec/unit/ssl/host_spec.rb | 66 +++++++++++++++++++++++-
4 files changed, 175 insertions(+), 5 deletions(-)
|
view
|
download
|
| 0019-2848-Rename-certdnsnames-to-match-new-behaviour.patch |
lib/puppet/defaults.rb | 31 +++++++++++++++++++++++++++---
lib/puppet/ssl/host.rb | 11 +++++-----
spec/integration/defaults_spec.rb | 11 ++++++++++
spec/unit/ssl/certificate_factory_spec.rb | 6 ++---
spec/unit/ssl/certificate_request_spec.rb | 10 ++++-----
spec/unit/ssl/host_spec.rb | 7 +++---
test/lib/puppettest/exetest.rb | 2 -
test/network/server/webrick.rb | 2 -
test/ral/type/filesources.rb | 23 ++++++++--------------
9 files changed, 68 insertions(+), 35 deletions(-)
|
view
|
download
|
| 0020-2848-rename-subject-alt-name-option-to-dns-alt-names.patch |
lib/puppet/application/cert.rb | 8 ++++----
lib/puppet/ssl/certificate_authority.rb | 16 +++++++---------
lib/puppet/ssl/certificate_authority/interface.rb | 4 ++--
lib/puppet/ssl/certificate_request.rb | 6 +++---
lib/puppet/ssl/host.rb | 6 +++---
spec/unit/ssl/certificate_authority/interface_spec.rb | 4 ++--
spec/unit/ssl/certificate_authority_spec.rb | 11 ++++-------
spec/unit/ssl/certificate_factory_spec.rb | 4 ++--
spec/unit/ssl/certificate_request_spec.rb | 6 +++---
spec/unit/ssl/certificate_spec.rb | 2 +-
spec/unit/ssl/host_spec.rb | 4 ++--
11 files changed, 33 insertions(+), 38 deletions(-)
|
view
|
download
|
| 0021-Wire-up-the-setbycli-slot-in-Puppet-settings.patch |
lib/puppet/util/settings.rb | 5 +++++
spec/unit/util/settings_spec.rb | 10 ++++++++++
2 files changed, 15 insertions(+)
|
view
|
download
|
| 0022-2848-Migrate-dns-alt-names-back-to-settings.patch |
lib/puppet/application/cert.rb | 13 +++++++++----
lib/puppet/defaults.rb | 34 +++++++++++++++++++++++++---------
lib/puppet/ssl/host.rb | 10 +++++++++-
3 files changed, 43 insertions(+), 14 deletions(-)
|
view
|
download
|
| 0023-2848-Only-mark-subjectAltName-critical-if-subject-is.patch |
lib/puppet/ssl/certificate_factory.rb | 5 +++++
lib/puppet/ssl/certificate_request.rb | 2 +-
2 files changed, 6 insertions(+), 1 deletion(-)
|
view
|
download
|
| 0024-2848-Don-t-enable-emailProtection-for-server-keys.patch |
lib/puppet/ssl/certificate_factory.rb | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
|
view
|
download
|
| 0025-2848-Don-t-strip-the-subjectAltName-label-when-listi.patch |
lib/puppet/ssl/certificate.rb | 2 +-
spec/unit/ssl/certificate_spec.rb | 3 ++-
2 files changed, 3 insertions(+), 2 deletions(-)
|
view
|
download
|
| 0026-2848-Consistently-use-subject_alt_names-as-accessor-.patch |
lib/puppet/ssl/certificate.rb | 2 +-
lib/puppet/ssl/certificate_authority/interface.rb | 2 +-
spec/unit/ssl/certificate_authority/interface_spec.rb | 2 +-
spec/unit/ssl/certificate_spec.rb | 4 ++--
4 files changed, 5 insertions(+), 5 deletions(-)
|
view
|
download
|
| 0027-2848-Consistent-return-values-from-subject_alt_names.patch |
lib/puppet/ssl/certificate_authority.rb | 33 +++++++++---------
lib/puppet/ssl/certificate_authority/interface.rb | 2 -
lib/puppet/ssl/certificate_request.rb | 4 --
spec/unit/ssl/certificate_authority/interface_spec.rb | 2 -
spec/unit/ssl/certificate_authority_spec.rb | 4 +-
spec/unit/ssl/certificate_request_spec.rb | 4 +-
spec/unit/ssl/certificate_spec.rb | 2 -
7 files changed, 26 insertions(+), 25 deletions(-)
|
view
|
download
|
| 0028-2848-Remove-unused-xmlrpc-code.patch |
lib/puppet/application/kick.rb | 2
lib/puppet/network/client.rb | 179 -----------------
lib/puppet/network/client/ca.rb | 56 -----
lib/puppet/network/client/file.rb | 6
lib/puppet/network/client/proxy.rb | 27 --
lib/puppet/network/client/report.rb | 26 --
lib/puppet/network/client/runner.rb | 10
lib/puppet/network/client/status.rb | 4
lib/puppet/network/handler/runner.rb | 1
lib/puppet/network/http_server.rb | 3
lib/puppet/network/http_server/mongrel.rb | 150 --------------
lib/puppet/network/http_server/webrick.rb | 155 ---------------
lib/puppet/network/xmlrpc/client.rb | 211 --------------------
lib/puppet/type/file.rb | 1
spec/integration/network/client_spec.rb | 19 -
spec/integration/network/handler_spec.rb | 2
spec/unit/network/client_spec.rb | 45 ----
spec/unit/network/xmlrpc/client_spec.rb | 171 ----------------
test/certmgr/certmgr.rb | 308 ------------------------------
test/certmgr/inventory.rb | 69 ------
test/certmgr/support.rb | 105 ----------
test/language/functions.rb | 1
test/language/snippets.rb | 9
test/lib/puppettest/servertest.rb | 1
test/network/client/ca.rb | 69 ------
test/network/client/dipper.rb | 34 ---
test/network/handler/ca.rb | 53 -----
test/network/server/mongrel_test.rb | 105 ----------
test/network/server/webrick.rb | 128 ------------
test/network/xmlrpc/client.rb | 45 ----
test/rails/rails.rb | 1
test/ral/type/filesources.rb | 55 -----
32 files changed, 2 insertions(+), 2049 deletions(-)
|
view
|
download
|
| 0029-2848-Rework-the-xmlrpc-CA-handler-to-use-the-modern-.patch |
lib/puppet/network/handler/ca.rb | 122 ++-----------------
lib/puppet/network/handler/master.rb | 3
lib/puppet/sslcertificates/ca.rb | 10 -
spec/unit/network/handler/ca_spec.rb | 87 +++++++++++++
test/network/handler/ca.rb | 220 -----------------------------------
5 files changed, 104 insertions(+), 338 deletions(-)
|
view
|
download
|
| 0030-2848-Remove-the-legacy-SSLCertificates-code.patch |
lib/puppet/sslcertificates.rb | 146 -----------
lib/puppet/sslcertificates/ca.rb | 367 -----------------------------
lib/puppet/sslcertificates/certificate.rb | 255 --------------------
lib/puppet/sslcertificates/inventory.rb | 38 ---
lib/puppet/sslcertificates/monkey_patch.rb | 6
lib/puppet/sslcertificates/support.rb | 146 -----------
spec/unit/sslcertificates/ca_spec.rb | 110 --------
7 files changed, 1068 deletions(-)
|
view
|
download
|
| 0031-2848-Eliminate-redundant-master_dns_alt_names.patch |
lib/puppet/defaults.rb | 40 ++++++++++++++----------
lib/puppet/ssl/host.rb | 27 ----------------
spec/unit/ssl/certificate_factory_spec.rb | 6 +--
spec/unit/ssl/certificate_request_spec.rb | 10 +++---
spec/unit/ssl/host_spec.rb | 49 +++---------------------------
test/lib/puppettest/exetest.rb | 2 -
6 files changed, 39 insertions(+), 95 deletions(-)
|
view
|
download
|
| 0032-s-not_to-should_not-for-older-versions-of-RSpec-2.patch |
spec/integration/defaults_spec.rb | 2 +-
spec/unit/ssl/certificate_authority_spec.rb | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
|
view
|
download
|
| 0033-Add-lines-alias-for-each_line-in-Ruby-1.8.5.patch |
lib/puppet/util/monkey_patches.rb | 9 +++++++++
1 file changed, 9 insertions(+)
|
view
|
download
|
| 0034-2848-Config-options-require-_-not.patch |
lib/puppet/defaults.rb | 4 ++--
lib/puppet/ssl/host.rb | 2 +-
lib/puppet/util/settings.rb | 2 +-
3 files changed, 4 insertions(+), 4 deletions(-)
|
view
|
download
|
| 0035-Better-1.8.5-compatible-implementation-of-lines.patch |
lib/puppet/util/monkey_patches.rb | 12 ++++++++++--
1 file changed, 10 insertions(+), 2 deletions(-)
|
view
|
download
|
| 0036-More-1.8.5-compatibility-fixes.patch |
lib/puppet/util/monkey_patches.rb | 2 ++
1 file changed, 2 insertions(+)
|
view
|
download
|
| 0037-Backport-Enumerable-count-to-Rubies-1.8.7.patch |
lib/puppet/util/monkey_patches.rb | 15 +++++++++++++++
1 file changed, 15 insertions(+)
|
view
|
download
|
| 0038-Allow-a-master-to-bootstrap-itself-with-dns_alt_name.patch |
lib/puppet/ssl/certificate_authority.rb | 1 +
spec/unit/ssl/host_spec.rb | 16 ++++++++++++++++
2 files changed, 17 insertions(+)
|
view
|
download
|
| 0039-Improve-the-error-message-when-a-CSR-is-rejected.patch |
lib/puppet/ssl/certificate_authority.rb | 6 +++---
spec/unit/ssl/certificate_authority_spec.rb | 4 ++--
2 files changed, 5 insertions(+), 5 deletions(-)
|
view
|
download
|
| 0040-Restore-Mongrel-XMLRPC-functionality.patch |
lib/puppet/network/http_server.rb | 3
lib/puppet/network/http_server/mongrel.rb | 129 ++++++++++++++++++++++++++++++
2 files changed, 132 insertions(+)
|
view
|
download
|
| 0001-missing-includes-in-network-XML-RPC-handlers.patch |
lib/puppet/network/handler/filebucket.rb | 2 ++
lib/puppet/network/handler/fileserver.rb | 2 ++
lib/puppet/network/handler/master.rb | 1 +
lib/puppet/network/handler/report.rb | 2 ++
lib/puppet/network/handler/runner.rb | 1 +
lib/puppet/network/handler/status.rb | 2 ++
6 files changed, 10 insertions(+)
|
view
|
download
|
| 0001-5552-Display-help-when-no-subcommand-is-given.patch |
lib/puppet/application/cert.rb | 8 +++++++-
lib/puppet/util/command_line/puppetca | 2 ++
spec/unit/application/cert_spec.rb | 10 ++++++++++
3 files changed, 19 insertions(+), 1 deletion(-)
|
view
|
download
|
| CVE-2012-1053-group-fixup.patch |
lib/puppet/util.rb | 50 ++------
lib/puppet/util/suidmanager.rb | 110 +++++++++++++-----
spec/unit/util/suidmanager_spec.rb | 220 +++++++++++++++++++++++++++++++++++++
3 files changed, 314 insertions(+), 66 deletions(-)
|
view
|
download
|
| CVE-2012-1054-safely-replace-existing-file.patch |
lib/puppet/util.rb | 69 +++++++++++++++++++++++++++++++-
spec/unit/util_spec.rb | 104 +++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 170 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2012-1054-copy-owner-group-in-replace-file.patch |
lib/puppet/util.rb | 27 +++++++++++++++++++++------
1 file changed, 21 insertions(+), 6 deletions(-)
|
view
|
download
|
| CVE-2012-1054-replace-secureopen-with-replacefile.patch |
lib/puppet/daemon.rb | 4 ++--
lib/puppet/network/server.rb | 2 +-
lib/puppet/rails/benchmark.rb | 2 +-
lib/puppet/util.rb | 22 ----------------------
lib/puppet/util/reference.rb | 22 ++++++++--------------
5 files changed, 12 insertions(+), 40 deletions(-)
|
view
|
download
|
| CVE-2012-1054-securely-replace-etc-shadow.patch |
lib/puppet/provider/user/user_role_add.rb | 49 ++++++++++++++-------
spec/unit/provider/user/user_role_add_spec.rb | 59 +++++++++++++++++++++-----
2 files changed, 80 insertions(+), 28 deletions(-)
|
view
|
download
|
| CVE-2012-1054-securely-replace-k5login.patch |
lib/puppet/type/k5login.rb | 5 +
spec/unit/type/k5login_spec.rb | 115 +++++++++++++++++++++++++++++++++++++++++
2 files changed, 119 insertions(+), 1 deletion(-)
|
view
|
download
|
| CVE-2012-1906.1986.1987.1988 |
lib/puppet/network/formats.rb | 27 -------
lib/puppet/network/http/api/v1.rb | 1
lib/puppet/provider/package/appdmg.rb | 26 +++----
lib/puppet/provider/package/pkgdmg.rb | 39 ++++-------
spec/unit/network/formats_spec.rb | 43 ------------
spec/unit/network/http/api/v1_spec.rb | 8 ++
spec/unit/provider/package/appdmg_spec.rb | 42 ++++++++++++
spec/unit/provider/package/pkgdmg_spec.rb | 102 +++++++++++++++---------------
8 files changed, 133 insertions(+), 155 deletions(-)
|
view
|
download
|
| 2.6.4-Puppet-July-2012-CVE-fixes-1.patch |
lib/puppet/application/master.rb | 30 +++-
lib/puppet/file_bucket/file.rb | 7
lib/puppet/file_bucket/file/indirection_hooks.rb | 9 -
lib/puppet/file_serving/configuration.rb | 3
lib/puppet/file_serving/content.rb | 3
lib/puppet/file_serving/indirection_hooks.rb | 34 ----
lib/puppet/file_serving/metadata.rb | 3
lib/puppet/file_serving/mount/modules.rb | 9 -
lib/puppet/file_serving/terminus_selector.rb | 33 ++++
lib/puppet/indirector/file_bucket_file/selector.rb | 49 ++++++
lib/puppet/indirector/file_content/selector.rb | 30 ++++
lib/puppet/indirector/file_metadata/selector.rb | 30 ++++
lib/puppet/reports/store.rb | 12 +
lib/puppet/ssl/base.rb | 8 +
lib/puppet/ssl/certificate_authority.rb | 10 +
lib/puppet/ssl/certificate_authority/interface.rb | 6
lib/puppet/ssl/host.rb | 1
spec/integration/file_bucket/file_spec.rb | 44 +++++
spec/integration/file_serving/content_spec.rb | 11 -
spec/integration/file_serving/metadata_spec.rb | 11 -
spec/shared_behaviours/file_serving.rb | 127 +++++++++--------
spec/shared_behaviours/file_serving_model.rb | 73 +++++++++
spec/spec_helper.rb | 20 ++
spec/unit/file_serving/configuration_spec.rb | 66 ++++----
spec/unit/file_serving/content_spec.rb | 4
spec/unit/file_serving/indirection_hooks_spec.rb | 63 --------
spec/unit/file_serving/metadata_spec.rb | 4
spec/unit/file_serving/mount/modules_spec.rb | 8 +
spec/unit/file_serving/terminus_selector_spec.rb | 62 ++++++++
spec/unit/indirector/file_bucket_file/selector_spec.rb | 29 +++
spec/unit/indirector/file_content/selector_spec.rb | 13 +
spec/unit/indirector/file_metadata/selector_spec.rb | 14 +
spec/unit/network/handler/ca_spec.rb | 1
spec/unit/ssl/certificate_authority/interface_spec.rb | 34 ++--
spec/unit/ssl/certificate_authority_spec.rb | 87 ++++++++++-
35 files changed, 674 insertions(+), 274 deletions(-)
|
view
|
download
|
| debian-changes-2.6.2-5+squeeze6 |
lib/puppet/network/rest_authconfig.rb | 1
lib/puppet/parser/ast/resource.rb | 7
lib/puppet/parser/compiler.rb | 4
lib/puppet/provider/service/debian.rb | 8 -
lib/puppet/resource/type.rb | 31 ++--
spec/unit/network/rest_authconfig_spec.rb | 1
spec/unit/parser/ast/resource_spec.rb | 227 +++++++++++++++++-------------
spec/unit/parser/compiler_spec.rb | 16 +-
spec/unit/provider/service/debian_spec.rb | 16 +-
spec/unit/resource/type_spec.rb | 26 +--
10 files changed, 201 insertions(+), 136 deletions(-)
|
view
|
download
|
![[patchlogo]](http://patch-tracker.debian.org/static/img/swirlpatch.png)