tocsin

Debian/puppet: medium 5.5

In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.

Action: Upgrade puppet to 5.4.0-1 or later.

Affected

introducedfixedlast affected
05.4.0-1-

Fixed versions

5.4.0-1

Sources

published · modified · JSON