A security issue was discovered in Puppet before version 7.12.1 where the agent may silently ignore Augeas settings or may be vulnerable to a denial of service condition prior to the first pluginsync.
A security issue was discovered in Puppet before version 7.12.1 where the agent may silently ignore Augeas settings or may be vulnerable to a denial of service condition prior to the first pluginsync.
https://puppet.com/security/cve/CVE-2021-27025 https://puppet.com/docs/puppet/7/release_notes_puppet.html#release_notes_puppet_7-12-1 https://tickets.puppetlabs.com/browse/PUP-11209 https://github.com/puppetlabs/puppet/commit/0e189e9988c4969280134d043b871851928caa41
Vulmon