tocsin

Debian/puppet: unknown

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote attackers to co

Action: Upgrade puppet to 2.7.18-3 or later.

Affected

introducedfixedlast affected
02.7.18-3-

Fixed versions

2.7.18-3

Sources

published · modified · JSON