SUSE-SU-2018:0571-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:0571-1

Related

Published

2018-03-01T13:34:13Z

Modified

2018-03-01T13:34:13Z

Summary

Security update for puppet

Details

This update for puppet fixes the following issues:

CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files were unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions (bsc#1080288)

References

Affected packages

Name: puppet
Purl: pkg:rpm/suse/puppet&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.5-15.9.1

{
    "binaries": [
        {
            "puppet": "3.8.5-15.9.1"
        }
    ]
}

Name: puppet
Purl: pkg:rpm/suse/puppet&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.5-15.9.1

{
    "binaries": [
        {
            "puppet": "3.8.5-15.9.1"
        }
    ]
}

Name: puppet
Purl: pkg:rpm/suse/puppet&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.5-15.9.1

{
    "binaries": [
        {
            "puppet": "3.8.5-15.9.1",
            "puppet-server": "3.8.5-15.9.1"
        }
    ]
}