app-admin/puppet-8.9.0 — Security Advisories

▸ GLSA 201308-04 Puppet: Multiple vulnerabilities this version unaffected high remote 2013-08-23

Multiple vulnerabilities have been found in Puppet, the worst of which could lead to execution of arbitrary code.

Announced: 2013-08-23
Revised: 2013-08-23
Access: remote
Bugs: #456002 #461656 #473720 #481186
Advisory: https://security.gentoo.org/glsa/201308-04

Affected packages

Package	Arch	Vulnerable	Unaffected
app-admin/puppet	*	< 2.7.23	>= 2.7.23

Background

Puppet is a system configuration management tool written in Ruby.

Description

Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All Puppet users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/puppet-2.7.23"

References

▸ GLSA 201208-02 Puppet: Multiple vulnerabilities this version unaffected high local 2012-08-14

Multiple vulnerabilities have been found in Puppet, the worst of which could lead to execution of arbitrary code.

Announced: 2012-08-14
Revised: 2012-08-14
Access: local
Bugs: #410857
Advisory: https://security.gentoo.org/glsa/201208-02

Affected packages

Package	Arch	Vulnerable	Unaffected
app-admin/puppet	*	< 2.7.13	>= 2.7.13

Background

Puppet is a system configuration management tool written in Ruby.

Description

Multiple vulnerabilities have been found in Puppet:

Puppet uses predictable file names for temporary files (CVE-2012-1906).
REST requests for a file in a remote filebucket are not handled properly by overriding filebucket storage locations (CVE-2012-1986).
REST requests for a file in a remote filebucket are not handled properly by reading streams or writing files on the Puppet master's file system (CVE-2012-1987).
File name paths are not properly sanitized from bucket requests (CVE-2012-1988).
The Telnet utility in Puppet does not handle temporary files securely (CVE-2012-1989).

Impact

A local attacker with access to agent SSL keys could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or perform symlink attacks to overwrite or read arbitrary files on the Puppet master.

Workaround

There is no known workaround at this time.

Resolution

All Puppet users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/puppet-2.7.13"

References

▸ GLSA 201203-03 Puppet: Multiple vulnerabilities this version unaffected high local, remote 2012-03-06

Multiple vulnerabilities have been found in Puppet, the worst of which might allow local attackers to gain escalated privileges.

Announced: 2012-03-06
Revised: 2012-03-06
Access: local, remote
Bugs: #303729 #308031 #384859 #385149 #388161 #403963
Advisory: https://security.gentoo.org/glsa/201203-03

Affected packages

Package	Arch	Vulnerable	Unaffected
app-admin/puppet	*	< 2.7.11	>= 2.7.11

Background

Puppet is a system configuration management tool written in Ruby.

Description

Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details.

Impact

A local attacker could gain elevated privileges, or access and modify arbitrary files. Furthermore, a remote attacker may be able to spoof a Puppet Master or write X.509 Certificate Signing Requests to arbitrary locations.

Workaround

There is no known workaround at this time.

Resolution

All Puppet users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/puppet-2.7.11"