USN-1238-2: Puppet regression

USN-1238-1 fixed vulnerabilities in Puppet. The upstream patch introduced a regression in Ubuntu 11.04 when executing certain commands. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Puppet incorrectly handled the non-default...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : puppet vulnerability (USN-1238-1)

It was discovered that Puppet incorrectly handled the non-default 'certdnsnames' option when generating certificates. If this setting was added to puppet.conf, the puppet master's DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet master'...

USN-1238-1: Puppet vulnerability

It was discovered that Puppet incorrectly handled the non-default "certdnsnames" option when generating certificates. If this setting was added to puppet.conf, the puppet primary server’s DNS alt names were added to the X.509 Subject Alternative Name field of all certificates, not just the puppet...

CVE-2011-3872

Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise PE Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof ...

Fedora Update for puppet FEDORA-2011-13636

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2011-13636 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for puppet FEDORA-2011-13636

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for puppet FEDORA-2011-13633

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for puppet FEDORA-2011-13633

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2011-13633 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 16 : puppet-2.6.6-3.fc16 (2011-13623)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Fedora 15 : puppet-2.6.6-3.fc15 (2011-13636)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Fedora 14 : puppet-2.6.6-3.fc14 (2011-13633)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

[SECURITY] Fedora 16 Update: puppet-2.6.6-3.fc16

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

Debian Security Advisory DSA 2314-1 (puppet)

The remote host is missing an update to puppet announced via advisory DSA 2314-1. OpenVAS Vulnerability Test $Id: deb23141.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2314-1 puppet Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2314-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 14 Update: puppet-2.6.6-3.fc14

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

[SECURITY] Fedora 15 Update: puppet-2.6.6-3.fc15

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

Ubuntu Update for puppet USN-1223-2

Ubuntu Update for Linux kernel vulnerabilities USN-1223-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12232.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for puppet USN-1223-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1223-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : puppet regression (USN-1223-2)

USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorizedkeys files with Puppet. This update fixes the problem. We apologize for the inconvenience. It was discovered that Puppet unsafely opened files wh...

USN-1223-2: Puppet regression

USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorizedkeys files with Puppet. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Pupp...