Updated puppet & puppet3 packages fix CVE-2013-4969 and a regression

2014-02-2001:15:34

Gentoo Foundation

advisories.mageia.org

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Updated puppet and puppet3 packages fix security vulnerability: An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system (CVE-2013-4969). This update also corrects an upstream regression, see references for details.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchpuppet< 2.7.23-1.2puppet-2.7.23-1.2.mga3
Mageia3noarchpuppet3< 3.2.4-1.2puppet3-3.2.4-1.2.mga3