Package: puppetmaster
Version: 0.26.0-2
Severity: grave

puppetmaster fails to properly set the environment name in the storeconfig host
entry. This leads to exponential growth, which is a DoS.

| puppet=> SELECT length(environment) from hosts;
|  length 
| --------
|      14
|      14
|      20
|        
|      20
|      96
|      14
|      28
|      14
|      20
|      28
|      14
|      20
|      20
|      20
|     296
| (16 rows)

The last row contains roughly:
--- "--- \"--- \\\"--- \\\\\\\"--- \\\\\\\\\\\\\\\"--- 
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"--- 
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"--- 
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"---
 
production\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"\\\\\\\\\\\\\\\"\\\\\\\"\\\"\""

Bastian

-- 
Each kiss is as the first.
                -- Miramanee, Kirk's wife, "The Paradise Syndrome",
                   stardate 4842.6



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to