Description
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Puppet Enterprise, Puppet Agent | - Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4.0, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1, Puppet Agent 5.5.x | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | puppet | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | puppet | No fix yet | — |
| Ubuntu 20.04 LTS | puppet | No fix yet | — |
| Ubuntu 18.04 LTS | puppet | No fix yet | — |
| Ubuntu 14.04 LTS | puppet | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | puppet | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | puppet-agent | 6.26.0-1.el7sat | RHSA-2022:1708 |
| Red Hat Satellite Capsule 6 | puppetserver | 6.18.0-1.el7sat | RHSA-2022:1708 |
| Red Hat Satellite 6 | puppet-agent | 6.26.0-1.el7sat | RHSA-2022:1708 |
| Red Hat Satellite 6 | puppetserver | 6.18.0-1.el7sat | RHSA-2022:1708 |
| Red Hat Rhel Satellite Tools 6 | puppet-agent | 6.26.0-1.el6sat | RHSA-2022:4867, RHSA-2022:4866 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 16 | puppet +2 | 5.5.10-14.el8ost | RHSA-2022:8862, RHSA-2022:8846 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | puppet | >= 7.0.0, < 7.12.1 | 7.12.1 | GHSA-q4g7-jrxv-67r9 |
| RubyGems | puppet | < 6.25.1 | 6.25.1 | GHSA-q4g7-jrxv-67r9 |
Advisories 6
- RHSA-2022:8862 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (puppet) security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2022:8846 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (puppet) security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2022:4866 Red Hat Security Advisory: Satellite Tools 6.10.5 Async Bug Fix Update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2022:4867 Red Hat Security Advisory: Satellite Tools 6.9.9 Async Bug Fix Update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2022:1708 Red Hat Security Advisory: Satellite 6.10.5 Async Bug Fix Update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- WID-SEC-2022-2265 Red Hat OpenStack: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 18, 2025
References
- https://puppet.com/security/cve/cve-2021-27025
- FEDORA-2021-1c0e788093 vendor-advisory