[Pkg-puppet-devel] [SCM] Puppet packaging for Debian annotated tag, upstream/3.1.1, created. upstream/3.1.1

Stig Sandbeck Mathisen ssm at debian.org
Wed Mar 13 10:18:59 UTC 2013


The annotated tag, upstream/3.1.1 has been created
        at  50f3d42f72692be504321efb0fa5546154b715f5 (tag)
   tagging  99de0b815d9c05804ddda33d5baa94b23ce1c39e (commit)
  replaces  upstream/3.1.0
 tagged by  Stig Sandbeck Mathisen
        on  Wed Mar 13 10:57:02 2013 +0100

- Shortlog ------------------------------------------------------------
Upstream version 3.1.1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEABECAAYFAlFATW4ACgkQQONU2fom4u61zACfZ+aRBsyChFKM07IISvpKH6kb
rPwAoKfTSUJpMIcXh2lDtU9wRR7HKSx2
=Z+WO
-----END PGP SIGNATURE-----

Andrew Parker (3):
      (#14093) Cleanup tests for template functionality
      (#14093) Remove unsafe attributes from TemplateWrapper
      (#14093) Restore access to the filename in the template

Jeff McCune (3):
      (#19151) Reject SSLv2 SSL handshakes and ciphers
      Merge pull request #16 from puppetlabs/security/3.1.0/indirector-validation
      (#19531) (CVE-2013-2275) Only allow report save from the node matching the certname

Josh Cooper (13):
      Merge remote-tracking branch 'puppet-cve-test/safely-yaml-3.1.0' into security/3.1.0/february_code_orange
      Merge branch 'zaphod42-issue/3.1.0/14093-string-overrides-all-template-output' into security/3.1.0/february_code_orange
      Merge branch 'jjm_fix/3.1.0/reject_sslv2' into security/3.1.0/february_code_orange
      Fix module tool acceptance test
      Merge branch 'jnc/3.1.0/forge-regexp' into security/3.1.0/february_code_orange
      Merge remote-tracking branch 'puppet-cve-test/jjm/3.1.0/feb_co_2275_reports' into security/3.1.0/february_code_orange
      Run openssl from windows when trying to downgrade master
      Remove unnecessary rubygems require
      Don't assume puppetbindir is defined
      Display SSL messages so we can match our regex
      Don't require openssl client to return 0 on failure
      Don't assume master supports SSLv2
      Merge pull request #30 from puppetlabs/cooper/3.1.0/oranges

Justin Stoller (6):
      Acceptance tests for CVEs 2013 (1640, 1652, 1653, 1654, 2274, 2275)
      Separate tests for same CVEs into separate files
      We can ( and should ) use grep instead of grep -E
      add quotes around paths for windows interop
      remove tests that do not run on 3.1+
      run curl against the master on the master

Moses Mendoza (1):
      Update PUPPETVERSION for 3.1.1

Nick Lewis (3):
      (#19393) Safely load YAML from the network
      Always read request body when using Rack
      Fix order-dependent test failure in network/authorization_spec

Patrick Carlisle (3):
      (#19391) (CVE-2013-1652) Disallow use_node compiler parameter for remote requests
      (#19392) (CVE-2013-1653) Validate instances passed to indirector
      (#19392) Don't validate key for certificate_status

Pieter van de Bruggen (1):
      Updating module tool acceptance tests with new expectations.

Stig Sandbeck Mathisen (1):
      Imported Upstream version 3.1.1

-----------------------------------------------------------------------

-- 
Puppet packaging for Debian



More information about the Pkg-puppet-devel mailing list