tocsin

Debian/puppet-agent: unknown

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arb

Action: Upgrade puppet-agent to 7.23.0-1+deb12u1 or later.

Affected

introducedfixedlast affected
07.23.0-1+deb12u1-

Fixed versions

7.23.0-1+deb12u1

Sources

published · modified · JSON