Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3355-1

Опубликовано: 23 сент. 2022
Источник: suse-cvrf

Описание

Security update for puppet

This update for puppet fixes the following issues:

  • CVE-2021-27023: Fixed unsafe HTTP redirect (bsc#1192797).

Список пакетов

SUSE Linux Enterprise Module for Advanced Systems Management 12
puppet-3.8.5-15.18.1
puppet-server-3.8.5-15.18.1

Ссылки

Описание

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

Затронутые продукты
SUSE Linux Enterprise Module for Advanced Systems Management 12:puppet-3.8.5-15.18.1
SUSE Linux Enterprise Module for Advanced Systems Management 12:puppet-server-3.8.5-15.18.1
Ссылки