Re: [Puppet Users] Puppet 2.7.26 (security release for CVE-2014-3248) is now available

2014-06-12 Thread Trevor Vaughan
Can we get a fix for Facter 1 as well since Puppet 2.7 requires Facter < 2? Or correct the Puppet RPM if that works. Thanks, Trevor On Tue, Jun 10, 2014 at 2:20 PM, Sam Kottler wrote: > Announce: Puppet 2.7.26 Available [ Security Release ] > > Puppet 2.7.26 is a security fix release in the P

[Puppet Users] Puppet 2.7.26 (security release for CVE-2014-3248) is now available

2014-06-10 Thread Sam Kottler
Announce: Puppet 2.7.26 Available [ Security Release ] Puppet 2.7.26 is a security fix release in the Puppet 2.7 series. This release addresses CVE-2014-3248. It has no other bug fixes or new features. ** CVE-2014-3248 ** Arbitrary Code Execution with Required Social Engineering An attacker could