*Dear Puppet and PE customers,We discovered a critical corruptive permissions issue with the Windows packages for puppet-agent 1.10.13, 5.3.7, and 5.5.2. We have taken down these builds and the associated Puppet Enterprise releases that contain them: 2016.4.12, 2017.3.7, and 2018.1.1. If you have already downloaded these versions, please do not install them or use them to upgrade any Windows agents. In some instances, the Windows installer is resetting permissions incorrectly across the node’s filesystem. It’s not clear that it affects 100% of installs. These releases included security fixes. If you have already installed or upgraded, the code in this gist <https://gist.github.com/Iristyle/471e9c083c51a0bd65e7423f924dea4e> can be run to remediate an unsafe permissions issue on Windows that was addressed in the pulled releases (CVE-2018-6513).We are working very hard to ship updated builds as soon as they are available. Please follow this thread or the Puppet Agent ticket <https://tickets.puppetlabs.com/browse/PA-2075> for updates.Our sincere apologies for the inconvenience.Thanks,* Rob Braden Puppet Release Team
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CANrW%3D%3D0exhO-Z%3DmyJ2jEPCjMASYNWXw-0yQcn_7HeZO%3DLxjUww%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
