In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppet" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppet-common" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppet-el" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppet-testsuite" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppetmaster" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppetmaster-common" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "puppetmaster-passenger" }, { "binary_version": "3.4.3-1ubuntu1.3", "binary_name": "vim-puppet" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppet" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppet-common" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppet-el" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppet-testsuite" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppetmaster" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppetmaster-common" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "puppetmaster-passenger" }, { "binary_version": "3.8.5-2ubuntu0.1+esm1", "binary_name": "vim-puppet" } ] }