[SECURITY] Fedora EPEL 6 Update: puppet-2.6.16-1.el6

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-5571 2012-04-16 17:21:32 -------------------------------------------------------------------------------- Name : puppet Product : Fedora EPEL 6 Version : 2.6.16 Release : 1.el6 URL : http://puppetlabs.com Summary : A network tool for managing many disparate systems Description : Puppet lets you centrally manage every important aspect of your system using a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, and files. -------------------------------------------------------------------------------- Update Information: This update fixes several security issues recently found in puppet related to filebucket functionality. For full details, refer to the upstream release notes: http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #810069 - CVE-2012-1986 puppet: Filebucket arbitrary file read https://bugzilla.redhat.com/show_bug.cgi?id=810069 [ 2 ] Bug #810070 - CVE-2012-1987 puppet: Filebucket denial of service https://bugzilla.redhat.com/show_bug.cgi?id=810070 [ 3 ] Bug #810071 - CVE-2012-1988 puppet: Filebucket arbitrary code execution https://bugzilla.redhat.com/show_bug.cgi?id=810071 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update puppet' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------