Debian/puppet-agent: unknown
Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arb
Action: Upgrade puppet-agent to 8.10.0-5+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.10.0-5+deb13u1 | - |
Fixed versions
| 8.10.0-5+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-115731#Debian:13/puppet-agent
- https://security-tracker.debian.org/tracker/CVE-2026-115731
published · modified · JSON