USN-3567-1: Puppet vulnerability
USN-3567-1: Puppet vulnerability Ubuntu Security Notice USN-3567-1 12th February, 2018 puppet vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Puppet could be made to crash or run programs. Software description puppet – Centralized configuration management Details It was discovered that Puppet incorrectly handled permissions whenunpacking certain tarballs. A local user could possibly use this issue toexecute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 14.04 LTS: puppet-common 3.4.3-1ubuntu1.3 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2017-10689 Source: USN-3567-1: Puppet vulnerability
