Your message dated Sat, 16 Jul 2022 00:38:45 +0000
with message-id <e1ocvpv-0007v0...@fasolo.debian.org>
and subject line Bug#990419: fixed in puppetdb 7.10.1-1
has caused the Debian Bug report #990419,
regarding CVE-2021-27021
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
990419: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990419
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: puppetdb
Version: 6.2.0-5
Severity: grave
Tags: security
X-Debbugs-Cc: Debian Security Team <t...@security.debian.org>

See https://puppet.com/security/cve/cve-2021-27021/

Fixed by 
https://github.com/puppetlabs/puppetdb/commit/c146e624d230f7410fb648d58ae28c0e3cd457a2
https://github.com/puppetlabs/puppetdb/commit/f8dc81678cf347739838e42cc1c426d96406c266
https://github.com/puppetlabs/puppetdb/commit/72bd137511487643a3a6236ad9e72a5dd4a6fadb

Cheers,
         Moritz

--- End Message ---
--- Begin Message ---
Source: puppetdb
Source-Version: 7.10.1-1
Done: Jérôme Charaoui <jer...@riseup.net>

We believe that the bug you reported is fixed in the latest version of
puppetdb, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 990...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jérôme Charaoui <jer...@riseup.net> (supplier of updated puppetdb package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 15 Jul 2022 17:57:36 -0400
Source: puppetdb
Architecture: source
Version: 7.10.1-1
Distribution: experimental
Urgency: medium
Maintainer: Puppet Package Maintainers 
<pkg-puppet-de...@lists.alioth.debian.org>
Changed-By: Jérôme Charaoui <jer...@riseup.net>
Closes: 990419 1012577
Changes:
 puppetdb (7.10.1-1) experimental; urgency=medium
 .
   * New upstream version 7.10.1 (Closes: #990419, #1012577)
   * Switch d/watch to git mode
   * Switch to leiningen build system
   * Fix upstream build tests
   * d/patches:
     - Refresh patches
     - Add patch to replace not-packaged yaml.core in tests
     - new patch to adjust paths in config.ini
     - Reorder patch, put Lein Local first
     - Prevent failure of disable-update-checking test
   * d/control:
     - update Build-Deps
     - bump minimum versions for 2 dependencies
     - add myself to Uploaders
     - tag test-specific Build-Deps
     - bump debhelper-compat to 13
     - fix dependency loop caused by #929685
   * d/rules:
     - fix installation of jar file
     - fix installation of database.ini
   * d/tests:
     - avoid test failure when logfile is missing
     - abort if puppetdb.service enters failed state
     - add Restrictions: isolation-container
     - disable puppet integration test for now
   * d/copyright:
     - add separate Apache-2.0 license stanza
     - add myself to debian/* copyright
     - add paragraph for new js source code
     - add missing license texts
   * Run wrap-and-sort -bastk
   * Bump Standards-Version to 4.6.1, no changes needed
   * Remove StandardOutput=syslog from service unit
   * Add d/upstream/metadata
Checksums-Sha1:
 5d0f082d1b57050bd03a8aad26011ae33ce98888 3998 puppetdb_7.10.1-1.dsc
 f33edf5059a1e9d7672b8f6328f4733a1f0620f3 1181120 puppetdb_7.10.1.orig.tar.xz
 ad1fbb48deee5fbf0bcf700caf6de8bd84676ca4 18852 puppetdb_7.10.1-1.debian.tar.xz
 ebd078990a87a9104557efacfaebfcf2defbd2bc 16657 
puppetdb_7.10.1-1_amd64.buildinfo
Checksums-Sha256:
 5f78674811a4b25d564a1d24656d30962ffa21830387ff2d6117aee54cfd4e0e 3998 
puppetdb_7.10.1-1.dsc
 f5284d92bea6dd7e18a8815e9f91f046cb7885da82382113ddf51a7ad4256193 1181120 
puppetdb_7.10.1.orig.tar.xz
 81d0a8a3f003c9297e49d26abb19bd65a5f418c4966f21f0fa2b737ad0df21d7 18852 
puppetdb_7.10.1-1.debian.tar.xz
 5775923ec4684c538b8569f6a170ed9bd3266ca32100c292ce9f61d5fff86000 16657 
puppetdb_7.10.1-1_amd64.buildinfo
Files:
 7133be43c7365a728e7c27561b2f092e 3998 admin optional puppetdb_7.10.1-1.dsc
 cca4667c4618a85c959613628c4ec978 1181120 admin optional 
puppetdb_7.10.1.orig.tar.xz
 ceeb300ceea39c612c3a171c437cbc7a 18852 admin optional 
puppetdb_7.10.1-1.debian.tar.xz
 1f4edd69de82cd7cec35f4930eaf17e1 16657 admin optional 
puppetdb_7.10.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=iUca
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to