DEBIAN-CVE-2017-2299

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...

PT-2017-15335

Name of the Vulnerable Software and Affected Versions puppetlabs-apache versions prior to 1.11.1 puppetlabs-apache versions prior to 2.1.0 Description The issue makes it easy to accidentally misconfigure TLS trust. If the ssl ca parameter is specified but the ssl certs dir parameter is not, a...