Puppet 2.7.19rc2 is a maintenance release candidate for Puppet in the 2.7.x series with bug fixes.
Downloads are available at: * Source https://downloads.puppetlabs.com/puppet/puppet-2.7.19rc2.tar.gz Windows package is available at https://downloads.puppetlabs.com/windows/puppet-2.7.19rc2.msi RPMs are available at https://yum.puppetlabs.com/el or /fedora Debs are available at https://apt.puppetlabs.com Mac package is available at https://downloads.puppetlabs.com/mac/puppet-2.7.19rc2.dmg See the Verifying Puppet Download section at: https://projects.puppetlabs.com/projects/puppet/wiki/Downloading_Puppet Please report feedback via the Puppet Labs Redmine site, using an affected puppet version of 2.7.19rc2: http://projects.puppetlabs.com/projects/puppet/ This release contains contributions from Andrew Parker and Daniel Pittman. ## Puppet 2.7.19rc2 Release Notes ## (#15471) Fix setting mode of last_run_summary The writlock function didn't work with setting the mode on the last_run_summary file. This backports some of the work in commit 7d8fd144949f21eff924602c2a6b7f130f1c0b69. Specifically, the changes from using writelock to replace_file for saving the summary file. This builds on top of the backport of getting replace_file to work on windows. (#15471) Ensure non-root can read report summary The security fix for locking down the last_run_report, which contains sensitive information, also locked down the last_run_summary, which does not contain sensitive information. Unfortunately this file is often used by monitoring systems so that they can track puppet runs. Since the agent runs as root and the monitoring systems do not, this caused the summary to become unreadable by the monitoring systems. This commit returns the summary to being world readable which undoes part of the change done in fd44bf5e6d0d360f6a493d663b653c121fa83c3f Use Win32 API atomic replace in `replace_file` The changes to enable Windows support in `replace_file` were not actually complete, and it didn't work when the file didn't exist - because of limitations of the emulation done on our side, rather than anything else. Windows has a bunch of quirks, and Ruby doesn't actually abstract over the underlying platform a great deal. We can use the Windows API ReplaceFile, and MoveFileEx, to achieve the desired behaviour though. This adds even more conditional code inside the `replace_file` method to handle multiple platforms - but it really isn't very clean. Better to get this working now, then refactor, though. ## Puppet 2.7.19rc2 Changelog ## Andrew Parker (2) Ab540aa0 (#15471) Fix setting mode of last_run_summary 7c7cffe (#15471) Ensure non-root can read report summary Daniel Pittman (1) a257105 Use Win32 API atomic replace in `replace_file` Moses Mendoza (1) a619bfd Add additional commits to CHANGELOG missed in 2.7.19rc1 -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to puppet-dev@googlegroups.com. To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.
