Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-210

Re-add CVE-2013-4761 acceptance tests to Puppet 2.7.23

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: PUP 2.7.23
    • Fix Version/s: PUP 3.4.0
    • Component/s: Modules
    • Labels:
      None
    • Template:
    • Story Points:
      1
    • CVE-ID:
      CVE-2013-4761
    • Sprint:
      Week 2013-09-11 to 2013-09-18, Week 2013-09-18 to 2013-09-25, Week 2013-09-25 to 2013-10-02, Week 2013-10-02 to 2013-10-09

      Description

      See #PP-209 for overview

      puppet-cve-test/release_2.7.23-minus-tests is what will be release

      puppet-cve-test/release_2.7.23 has two commits, plus /some/ changes in a third commit which will need to be merged in:

      jpartlow@percival:~/work/puppet$ git lg 2.7.22..release_2.7.23 – acceptance/tests/security

      • 9e5ef53 Pieter van de Bruggen 4 days ago Fixing broken requires in the acceptance tests.
      • c52b104 Andrew Parker 4 days ago (#21971) Add test for accessing based on master being at root
      • e0470d7 Andrew Parker 4 days ago (#21971) Create test to show exploit of resource_type

      NOTE: 9e5ef53 has changes to the PMT code which will already have been released. But the two changes to require for the acceptance/tests/security tests will need to be ported.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              joshua.partlow Joshua Partlow
              Reporter:
              joshua.partlow Joshua Partlow
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support