Please backport puppet 2.7.1-1ubuntu3.6 (main) from oneiric-security

[Micah Gersten]

Please backport puppet 2.7.1-1ubuntu3.6 (main) from oneiric-security to natty.

Reason for the backport:
========================
Backport security update

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

You can test-build the backport in your PPA with backportpackage:$ backportpackage -u ppa:<lp username>/<ppa name> -s oneiric -d natty puppet

Test packages available in ppa:micahg/ppa in a few hours

* natty:
[ ] Package builds without modification
[ ] puppetmaster-common installs cleanly and runs
[ ] puppetmaster installs cleanly and runs
[ ] puppet-testsuite installs cleanly and runs
[ ] puppet installs cleanly and runs
[ ] puppet-common installs cleanly and runs
[ ] puppet-el installs cleanly and runs
[ ] puppetmaster-passenger installs cleanly and runs
[ ] vim-puppet installs cleanly and runs

* lucid:
[ ] Package builds without modification
[ ] puppetmaster-common installs cleanly and runs
[ ] puppetmaster installs cleanly and runs
[ ] puppet-testsuite installs cleanly and runs
[ ] puppet installs cleanly and runs
[ ] puppet-common installs cleanly and runs
[ ] puppet-el installs cleanly and runs
[ ] puppetmaster-passenger installs cleanly and runs
[ ] vim-puppet installs cleanly and runs

No reverse dependencies

[Micah Gersten (micahg)]

Glenn, would you be up for another round of smoke testing puppet security backports? (install/run)

[Glenn Aaldering (glennaaldering)]

Hello Micah,

But ofcourse:

* natty:
[x] Package builds without modification
[x] puppetmaster-common installs cleanly and runs
[x] puppetmaster installs cleanly and runs
[x] puppet-testsuite installs cleanly and runs
[x] puppet installs cleanly and runs
[x] puppet-common installs cleanly and runs
[x] puppet-el installs cleanly and runs
[x] puppetmaster-passenger installs cleanly and runs
[x] vim-puppet installs cleanly and runsvi /etc/

* lucid:
[x] Package builds without modification
[x] puppetmaster-common installs cleanly and runs
[x] puppetmaster installs cleanly and runs
[x] puppet-testsuite installs cleanly and runs
[x] puppet installs cleanly and runs
[x] puppet-common installs cleanly and runs
[x] puppet-el installs cleanly and runs
[x] puppetmaster-passenger installs cleanly and runs
[x] vim-puppet installs cleanly and runs

The only strange thing im noticing is that after purging puppetmaster-passenger and installing it again the mod_passenger doesnt get loaded. Probably thats not because of your patch but it is something in the puppetmaster-passenger debian scripts. a2enmod passenger does the trick. Maybe someone else got the same issue after reinstalling puppetmaster-passenger?

[Micah Gersten (micahg)]

Marc, is the issue that Glenn found in the above comment problematic for a backport of puppet?

[Glenn Aaldering (glennaaldering)]

The issue exists in Precise as well so its not related to your backport.

[Micah Gersten (micahg)]

Glenn, thanks for checking that, would you mind filing a bug for precise then? I'm approving these backports then.

[Adam Conrad (adconrad)]

I: Extracting puppet_2.7.1-1ubuntu3.6.dsc ... done.
I: Building backport of puppet as 2.7.1-1ubuntu3.6~lucid1 ... done.

[Adam Conrad (adconrad)]

I: Extracting puppet_2.7.1-1ubuntu3.6.dsc ... done.
I: Building backport of puppet as 2.7.1-1ubuntu3.6~natty1 ... done.

[Marc Cluet (lynxman)]

The latest CVEs affect all the 2.7.x branch so security updates to puppet must be backported to all versions

[Micah Gersten (micahg)]

Marc, that wasn't the question, but we pushed out the backport ~11 hours ago. I was worried about the issue with enabling the passenger module, but Glenn said it affected precise as well.

[Glenn Aaldering (glennaaldering)]

Micah: as requested I created the bugreport: https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/987207