Unscored DSA-2419-1 2 CVEs

puppet - several

Published Feb 27, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	puppet	2.6.2-5+squeeze4

Vulnerabilities 2

Medium —

CVE-2012-1053

Puppet Privilege Escallation

The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows loca…

puppet puppet Debian RubyGems

May 29, 2012
Unscored —

CVE-2012-1054

Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.…

puppet Debian

May 29, 2012