Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/puppet@3.2.4-1?distro=bullseye
purl pkg:deb/debian/puppet@3.2.4-1?distro=bullseye
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-5g6u-uvej-xbad Moderate severity vulnerability that affects puppet Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master. CVE-2013-4761
GHSA-cj43-9h3w-v976
VCID-73uh-2gkm-6kgy Multiple vulnerabilities have been found in Puppet, the worst of which could lead to execution of arbitrary code. CVE-2013-4956

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:18:10.990428+00:00 Debian Importer Fixing VCID-5g6u-uvej-xbad https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:54:59.939412+00:00 Debian Importer Fixing VCID-73uh-2gkm-6kgy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:41:25.633578+00:00 Debian Importer Fixing VCID-5g6u-uvej-xbad https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:59:02.315957+00:00 Debian Importer Fixing VCID-73uh-2gkm-6kgy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:26.003207+00:00 Debian Importer Fixing VCID-73uh-2gkm-6kgy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:25.940246+00:00 Debian Importer Fixing VCID-5g6u-uvej-xbad https://security-tracker.debian.org/tracker/data/json 38.1.0