tocsin

Debian/hiera: unknown

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.

Action: Upgrade hiera to 1.3.4-1 or later.

Affected

introducedfixedlast affected
01.3.4-1-

Fixed versions

1.3.4-1

Sources

published · modified · JSON