puppet: insecure tempfile creation
| Package(s): | puppet |
CVE #(s): | CVE-2010-0156
|
| Created: | March 2, 2010 |
Updated: | June 14, 2010 |
| Description: |
From the Red Hat bugzilla:
puppet may create several predictable files in /tmp, e.g.
/tmp/daemonout
/tmp/puppetdoc.txt
/tmp/puppetdoc.tex
|
| Alerts: |
| Gentoo |
201203-03 |
puppet |
2012-03-05 |
| SuSE |
SUSE-SR:2010:013 |
apache2-mod_php5/php5, bytefx-data-mysql/mono, flash-player, fuse, java-1_4_2-ibm, krb5, libcmpiutil/libvirt, libmozhelper-1_0-0/mozilla-xulrunner190, libopenssl-devel, libpng12-0, libpython2_6-1_0, libtheora, memcached, ncpfs, pango, puppet, python, seamonkey, te_ams, texlive |
2010-06-14 |
| Ubuntu |
USN-917-1 |
puppet |
2010-03-24 |
| Fedora |
FEDORA-2010-1372 |
puppet |
2010-02-21 |
| Fedora |
FEDORA-2010-1079 |
puppet |
2010-02-21 |
|
LWN