{"action":"Upgrade puppet to 2.7.6-1 or later.","affected":[{"fixed":"2.7.6-1","introduced":"0"}],"component":"puppet","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["2.7.6-1"],"id":"tcs_01M5N9W1CDZNEQFGE5F82VW46V","modified_at":"2026-08-25T02:47:21.751924439Z","published_at":"2011-10-27T20:55:01.760Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-3872","https://security-tracker.debian.org/tracker/CVE-2011-3872"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-3872","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-3872"}],"summary":"Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to t"}