[Pkg-puppet-devel] Bug#651177: Missing puppet modules after puppet-common security update

costasd costasd at students.cs.unipi.gr
Tue Dec 6 14:04:40 UTC 2011


Package: puppet-common
Version: 2.6.2-5+squeeze3


Hello,

After the last security update on puppet-common that bumped 
puppet-common version from +squeeze1 to +squeeze3, some puppet modules 
are not included any more, causing our custom puppet scripts to break.
Is this a deliberate choice, so we should update them, or a bug?

The only change from changelog from +squeeze1 to +squeeze3 is the 
CVE-2011-3872 fix.

Below you can find a comparison of the two versions (directly from the 
extracted deb packages):

$ diff -r -q squeeze1/ squeeze3/  | grep Only
Only in squeeze1/usr/lib/ruby/1.8/puppet/network: client
Only in squeeze1/usr/lib/ruby/1.8/puppet/network: client.rb
Only in squeeze1/usr/lib/ruby/1.8/puppet/network/http_server: webrick.rb
Only in squeeze1/usr/lib/ruby/1.8/puppet/network/xmlrpc: client.rb
Only in squeeze1/usr/lib/ruby/1.8/puppet: sslcertificates
Only in squeeze1/usr/lib/ruby/1.8/puppet: sslcertificates.rb


This behaviour occurs on a clean Debian 6.0.3 Squeeze box (no backports 
or third party repositories), used as the puppetmaster.

Thanks in advance,
Costas Drogos





More information about the Pkg-puppet-devel mailing list