Ubuntu Security Notice 1759-1 - It was discovered that Puppet agents incorrectly handled certain kick connections in a non-default configuration. An attacker on an authenticated client could use this issue to possibly execute arbitrary code. It was discovered that Puppet incorrectly handled certain catalog requests. An attacker on an authenticated client could use this issue to possibly execute arbitrary code on the master. Various other issues were also addressed.
cccb65197566007976c698911967efc5871071adafb220b210b3946a8aba7461
============================================================================
Ubuntu Security Notice USN-1759-1
March 12, 2013
puppet vulnerabilities
============================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
Summary:
Several security issues were fixed in Puppet.
Software Description:
- puppet: Centralized configuration management
Details:
It was discovered that Puppet agents incorrectly handled certain kick
connections in a non-default configuration. An attacker on an authenticated
client could use this issue to possibly execute arbitrary code.
(CVE-2013-1653)
It was discovered that Puppet incorrectly handled certain catalog requests.
An attacker on an authenticated client could use this issue to possibly
execute arbitrary code on the master. (CVE-2013-1640)
It was discovered that Puppet incorrectly handled certain client requests.
An attacker on an authenticated client could use this issue to possibly
perform unauthorized actions. (CVE-2013-1652)
It was discovered that Puppet incorrectly handled certain SSL connections.
An attacker could use this issue to possibly downgrade connections to
SSLv2. (CVE-2013-1654)
It was discovered that Puppet incorrectly handled serialized attributes.
An attacker on an authenticated client could use this issue to possibly
cause a denial of service, or execute arbitrary. (CVE-2013-1655)
It was discovered that Puppet incorrectly handled submitted reports.
An attacker on an authenticated node could use this issue to possibly
submit a report for any other node. (CVE-2013-2275)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.10:
puppet-common 2.7.18-1ubuntu1.1
Ubuntu 12.04 LTS:
puppet-common 2.7.11-1ubuntu2.2
Ubuntu 11.10:
puppet-common 2.7.1-1ubuntu3.8
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1759-1
CVE-2013-1640, CVE-2013-1652, CVE-2013-1653, CVE-2013-1654,
CVE-2013-1655, CVE-2013-2275
Package Information:
https://launchpad.net/ubuntu/+source/puppet/2.7.18-1ubuntu1.1
https://launchpad.net/ubuntu/+source/puppet/2.7.11-1ubuntu2.2
https://launchpad.net/ubuntu/+source/puppet/2.7.1-1ubuntu3.8