tocsin

Debian/puppet: unknown

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

Action: Upgrade puppet to 3.4.1-1 or later.

Affected

introducedfixedlast affected
03.4.1-1-

Fixed versions

3.4.1-1

Sources

published · modified · JSON