Debian/puppet-module-puppetlabs-apt: critical 9.8
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the mod
Action: Upgrade puppet-module-puppetlabs-apt to 9.0.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.1-1 | - |
Fixed versions
| 9.0.1-1 |
Sources
- osv: DEBIAN-CVE-2022-3275#Debian:14/puppet-module-puppetlabs-apt
- https://security-tracker.debian.org/tracker/CVE-2022-3275
published · modified · JSON