RHSA-2013:0710High

Red Hat Security Advisory: puppet security update

Published
April 4, 2013
Last Modified
January 28, 2026

🔗 CVE IDs covered (6)

CVE-2012-6120 →CVE-2013-1640 →CVE-2013-1652 →CVE-2013-1654 →CVE-2013-2274 →CVE-2013-2275 →

📋 Description

CVE-2012-6120 — Puppet: Directory /var/log/puppet is world readable CVE-2013-1640 — Puppet: catalog request code execution CVE-2013-1652 — Puppet: HTTP GET request catalog retrieval CVE-2013-1654 — Puppet: SSL protocol downgrade CVE-2013-2274 — Puppet: HTTP PUT report saving code execution vulnerability CVE-2013-2275 — Puppet: default auth.conf allows authenticated node to submit a report for any other node

🎯 Affected products4

  • OpenStack Folsom
  • puppet-0:2.6.18-1.el6ost.noarch as a component of OpenStack Folsom
  • puppet-0:2.6.18-1.el6ost.src as a component of OpenStack Folsom
  • puppet-server-0:2.6.18-1.el6ost.noarch as a component of OpenStack Folsom

✅ Remediation

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

🔗 References (9)