{"action":"Upgrade puppet to 4.10.10 or later.","affected":[{"fixed":"4.10.10","introduced":"0"},{"fixed":"5.3.4","introduced":"5.0.0"}],"component":"puppet","cve_ids":["CVE-2017-10689"],"ecosystem":"RubyGems","epss":0.00356,"exploited":false,"fixed_versions":["4.10.10","5.3.4"],"ghsa_id":"GHSA-vw22-465p-8j5w","id":"tcs_01M5KENQ656QWY5T3BBCAPP4Y1","modified_at":"2024-02-20T05:32:16.784114Z","published_at":"2022-05-13T01:41:57Z","references":["https://osv.dev/vulnerability/GHSA-vw22-465p-8j5w","https://nvd.nist.gov/vuln/detail/CVE-2017-10689","https://github.com/puppetlabs/puppet/commit/17d9e02da3882e44c1876e2805cf9708481715ee","https://github.com/puppetlabs/puppet/commit/2f1047f85e22cde139a421bc25d371f2ffc92cb1","https://access.redhat.com/errata/RHSA-2018:2927","https://github.com/puppetlabs/puppet","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2017-10689.yml","https://puppet.com/security/cve/CVE-2017-10689","https://tickets.puppetlabs.com/browse/PUP-7866","https://usn.ubuntu.com/3567-1"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-vw22-465p-8j5w","url":"https://osv.dev/vulnerability/GHSA-vw22-465p-8j5w"}],"summary":"Tarball permission preservation in puppet"}