Back to bug 1045212

Who When What Removed Added
Kurt Seifried 2013-12-19 21:29:39 UTC CC security-response-team
Red Hat Bugzilla 2013-12-19 21:29:39 UTC Doc Type --- Bug Fix
Kurt Seifried 2013-12-19 21:30:20 UTC CC abaron, aortega, apevec, ayoung, bdunne, bhu, bkearney, ccoleman, chrisw, cpelland, dajohnso, dallan, dmcphers, esammons, gkotton, hateya, iboverma, jfrey, jialiu, jomara, jrafanie, jross, kseifried, lhh, lmeyer, markmc, matt, mcressma, mmccune, obarenbo, pmyers, rbryant, sclewis, tkramer, williams, xlecauch, yeylon
Kurt Seifried 2013-12-19 21:33:36 UTC Blocks 1045213
Ratul Gupta 2013-12-27 05:49:49 UTC CC ratulg
Summary EMBARGOED CVE-2013-4969 Puppet: Unsafe use of Temp files in File type CVE-2013-4969 Puppet: Unsafe use of Temp files in File type
Whiteboard impact=low,public=no,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=affected,openstack-3/ruby193-puppet=affected,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=affected,openstack-3/ruby193-puppet=affected,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected
Tomas Hoger 2013-12-27 12:58:33 UTC Depends On 1046902
Ratul Gupta 2013-12-30 11:18:59 UTC Group security, qe_staff
Ratul Gupta 2014-01-02 09:11:15 UTC Depends On 1047792
Tomas Hoger 2014-01-02 21:25:13 UTC Fixed In Version puppet 3.4.1
Dominic Cleal 2014-01-09 13:25:34 UTC CC dcleal
John Skeoch 2014-01-13 01:19:43 UTC CC hateya
Sam Kottler 2014-01-14 10:49:58 UTC CC skottler
Assignee security-response-team skottler
John Skeoch 2014-01-23 00:01:36 UTC CC ratulg mjc
Mark J. Cox 2014-01-27 09:02:04 UTC CC mjc
Beth Uptagrafft 2014-01-27 14:36:16 UTC CC bhu, williams
John Skeoch 2014-03-17 02:03:22 UTC CC abaron iheim
John Skeoch 2014-06-18 07:58:36 UTC CC tkramer mmcgrath
John Skeoch 2014-06-18 08:15:26 UTC CC skottler ohadlevy
John Skeoch 2014-06-18 08:16:18 UTC Assignee skottler ohadlevy
John Skeoch 2014-06-24 00:11:16 UTC CC dallan
Kurt Seifried 2014-07-05 03:02:25 UTC Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=affected,openstack-3/ruby193-puppet=affected,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=affected,openstack-3/ruby193-puppet=affected,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected
Garth Mollett 2014-07-05 03:56:05 UTC CC gmollett
Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=affected,openstack-3/ruby193-puppet=affected,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected
Kurt Seifried 2014-07-10 04:43:12 UTC Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=affected,cfme-5/puppet=affected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=wontfix,cfme-5/puppet=affected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected
Kurt Seifried 2014-09-06 17:24:20 UTC Depends On 1138953
Kurt Seifried 2014-09-06 17:27:02 UTC Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=affected,sam-1/puppet=wontfix,cfme-5/puppet=affected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected
Garth Mollett 2014-09-06 23:54:23 UTC Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=affected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=notaffected
Garth Mollett 2014-10-03 07:06:12 UTC Status NEW CLOSED
Resolution --- CURRENTRELEASE
Last Closed 2014-10-03 03:06:12 UTC
Ján Rusnačko 2014-10-03 08:50:43 UTC CC jrusnack
Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=notaffected impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=notaffected,cwe=CWE-377
Perry Myers 2016-04-27 02:00:13 UTC CC pmyers
Product Security DevOps Team 2019-09-29 13:11:26 UTC Whiteboard impact=low,public=20131226,reported=20131219,source=upstream,cvss2=2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P,fedora-all/puppet=affected,epel-5/puppet=affected,epel-6/puppet=affected,mrg-1.3/puppet=wontfix,sam-1/puppet=wontfix,cfme-5/puppet=notaffected,openstack-3/puppet=wontfix,openstack-3/ruby193-puppet=wontfix,openstack-4/puppet=affected,openshift-1/puppet3=affected,rhn_satellite_6/ruby193-puppet=affected,openstack-5/puppet=notaffected,cwe=CWE-377

Back to bug 1045212