Hi John,
Thanks for the concern, we only use puppet on our test cluster (which isn't even registered with the EGI) and I had been notified by Stuart about the puppet labs advisory before the EGI announcement so any front facing services as well as the master server are at the latest version of puppet (3.2.2-1 I think), anything with 2.6 on it isn't used and probably can't even talk to the master as the keys are invalid at them moment as they are waiting to be rebuilt to SL6 when we need to create new test services. This doesn't effect our production system as we have not rolled puppet out onto our production system as we're still trialling it.
Thanks again,
Gareth
On 26 Jun 2013, at 11:24, John Hill wrote:
> There was an EGI CSIRT Advisory last Wednesday (19th) - if sites don't
> update to at least 2.7.22 or 3.2.2 by *today* then they risk suspension.
>
> John
>
> On 26/06/2013 11:19, Stephen Jones wrote:
>> On 06/26/2013 10:00 AM, Mark Mitchell wrote:
>>> Currently, the Glasgow test cluster is being rebuilt using Puppet 3
>>> and Puppet 2.6.
>>
>> BTW: due to some security hitch
>> (http://puppetlabs.com/security/cve/cve-2013-3567/), they say to use
>> puppet-2.7.22-1 or better (I don't know about v3).
>>
>>
>> Steve
>>
>>
>>
>>
|