https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:36:19.298192+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2015-09427 bdu:2015-09427 2026-09-28T09:36:19.302571+00:00 bdu:2015-09427 https://vulnerability.circl.lu/vuln/fkie_cve-2011-3870 fkie_cve-2011-3870 2026-09-28T09:36:19.302631+00:00

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

 https://vulnerability.circl.lu/vuln/ghsa-qh3g-27jf-3j54 GHSA-qh3g-27jf-3j54 — Puppet allows local users to modify the permissions of arbitrary files 2026-09-28T09:36:19.302680+00:00

Affected: RubyGems: puppet

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

 https://vulnerability.circl.lu/vuln/gsd-2011-3870 gsd-2011-3870 2026-09-28T09:36:19.302717+00:00 gsd-2011-3870