puppet (3.4.3-1ubuntu1.3) trusty-security; urgency=medium

  * SECURITY UPDATE: insecure permissions when unpacking tarballs
    - debian/patches/CVE-2017-10689-1.patch: reset permissions when
      unpacking tar in lib/puppet/module_tool/tar/mini.rb, fix test in
      spec/unit/module_tool/tar/mini_spec.rb.
    - debian/patches/CVE-2017-10689-2.patch: use Integer instead of Fixnum
      in lib/puppet/module_tool/tar/mini.rb.
    - CVE-2017-10689

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 09 Feb 2018 13:46:46 -0500

puppet (3.4.3-1ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: untrusted search path vulnerability
    - debian/patches/CVE-2014-3248.patch: remove current directory from
      load path in bin/puppet.
    - CVE-2014-3248
  * SECURITY UPDATE: code execution via unsafe fact formats
    - debian/patches/CVE-2017-2295.patch: reject all fact formats except
      PSON in lib/puppet/indirector/catalog/compiler.rb, added tests to
      spec/unit/indirector/catalog/compiler_spec.rb.
    - CVE-2017-2295

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 02 Jun 2017 10:29:36 -0400

puppet (3.4.3-1ubuntu1.1) trusty; urgency=medium

  * fix wrong process name match in logrotate script (LP: #1410383)

 -- Bartosz Cisek <bartoszcisek@bartoszcisek.pl>  Fri, 06 Feb 2015 14:48:16 +0100

puppet (3.4.3-1ubuntu1) trusty; urgency=medium

  * Wait until the puppet and puppetmaster daemons are actually stopped
    before returning (LP: #1315021)

 -- Felipe Reyes <felipe.reyes@canonical.com>  Wed, 04 Feb 2015 17:11:00 -0300

puppet (3.4.3-1) unstable; urgency=medium

  [ Jonas Genannt ]
  * [57515db] d/control: added ruby-rrd as primary Suggests, left librrd-ruby
    for easy backporting.

  [ Stig Sandbeck Mathisen ]
  * Imported upstream release 3.4.3

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 20 Feb 2014 11:41:42 +0100

puppet (3.4.2-1) unstable; urgency=medium

  * Imported upstream release 3.4.2

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 07 Jan 2014 12:04:39 +0100

puppet (3.4.1-1) unstable; urgency=high

  * Imported upstream release 3.4.1 (CVE-2013-4969)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 26 Dec 2013 23:43:56 +0100

puppet (3.4.0-1) unstable; urgency=medium

  * Imported upstream release 3.4.0
    - Update puppetmaster passenger template source path
    - Refresh quilt patches
  * Include upstream provided puppet ldap schema (Closes: #730627)
  * Update dependencies: add ruby-rgen and ruby-rack
    - have puppet-testsuite recommend ruby-rgen until it has passed NEW
  * Make uscan verify new upstream versions automatically with GnuPG
  * Update DEP-8 tests, use sharness
  * Bump standards version (no changes)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 20 Dec 2013 10:20:39 +0100

puppet (3.3.1-1) unstable; urgency=low

  * Imported upstream release 3.3.1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 08 Oct 2013 09:32:30 +0200

puppet (3.3.0-1) unstable; urgency=low

  * Imported upstream release 3.3.0
  * Move dependency on ruby-hiera from puppetmaster-common to puppet-common
    (Closes: #712780)
  * Drop "duplicate-resource" patch included in current upstream version
  * debian/control: Clean up old dependencies, remove unused headers
  * Improve systemd packaging, use dh-systemd.
    Thanks to Michael Stapelberg (Closes: #714202)
  * Use "puppet master" to retrieve configuration for puppetmaster-passenger
    (Closes: #722614)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 15 Sep 2013 14:51:22 +0200

# For older changelog entries, run 'apt-get changelog puppet-el'
