Debian/mcollective: critical 9.8
MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.
Action: Upgrade mcollective to 2.12.0+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12.0+dfsg-1 | - |
Fixed versions
| 2.12.0+dfsg-1 |
Sources
published · modified · JSON