Debian patches Trapperkeeper flaw that exposed Puppet host catalogues
VULNERABILITYredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A security update from Debian fixes a weakness in software used by Puppet servers, which manage the settings of many computers. The flaw could let one computer download the configuration details meant for a different computer. Systems that use this package should install the update.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Apply the Debian security update DSA-6609-1 to the trapperkeeper-authorization-clojure package.
- Check whether your Puppet servers run Trapperkeeper with this package installed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Debian Security Advisories