Oval Definition:	oval:org.opensuse.security:def:201710689
Revision Date: 2022-09-02 Version: 1 Title: CVE-2017-10689 Description: In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-10689 SUSE-SU-2018:0571-1 SUSE-SU-2018:0602-1 openSUSE-SU-2018:0471-1 Mitre CVE-2017-10689 SUSE CVE-2017-10689 SUSE-SU-2018:0571-1 SUSE-SU-2018:0602-1 openSUSE-SU-2018:0471-1 Platform(s): openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND puppet-3.8.5-15.9 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed AND puppet-3.8.5-15.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.8.5-15.9 is installed OR puppet-server-3.8.5-15.9 is installed OR ruby2.1-rubygem-puppet-4.8.1-32.3 is installed OR rubygem-puppet-4.8.1-32.3 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information ruby2.1-rubygem-puppet-3.8.7-23 is installed AND ruby2.1-rubygem-puppet is signed with openSUSE key OR ruby2.1-rubygem-puppet-doc-3.8.7-23 is installed AND ruby2.1-rubygem-puppet-doc is signed with openSUSE key OR ruby2.1-rubygem-puppet-testsuite-3.8.7-23 is installed AND ruby2.1-rubygem-puppet-testsuite is signed with openSUSE key OR ruby2.2-rubygem-puppet-3.8.7-23 is installed AND ruby2.2-rubygem-puppet is signed with openSUSE key OR ruby2.2-rubygem-puppet-doc-3.8.7-23 is installed AND ruby2.2-rubygem-puppet-doc is signed with openSUSE key OR ruby2.2-rubygem-puppet-testsuite-3.8.7-23 is installed AND ruby2.2-rubygem-puppet-testsuite is signed with openSUSE key OR ruby2.3-rubygem-puppet-3.8.7-23 is installed AND ruby2.3-rubygem-puppet is signed with openSUSE key OR ruby2.3-rubygem-puppet-doc-3.8.7-23 is installed AND ruby2.3-rubygem-puppet-doc is signed with openSUSE key OR ruby2.3-rubygem-puppet-testsuite-3.8.7-23 is installed AND ruby2.3-rubygem-puppet-testsuite is signed with openSUSE key OR ruby2.4-rubygem-puppet-3.8.7-23 is installed AND ruby2.4-rubygem-puppet is signed with openSUSE key OR ruby2.4-rubygem-puppet-doc-3.8.7-23 is installed AND ruby2.4-rubygem-puppet-doc is signed with openSUSE key OR ruby2.4-rubygem-puppet-testsuite-3.8.7-23 is installed AND ruby2.4-rubygem-puppet-testsuite is signed with openSUSE key OR rubygem-puppet-3.8.7-23 is installed AND rubygem-puppet is signed with openSUSE key OR rubygem-puppet-emacs-3.8.7-23 is installed AND rubygem-puppet-emacs is signed with openSUSE key OR rubygem-puppet-master-3.8.7-23 is installed AND rubygem-puppet-master is signed with openSUSE key OR rubygem-puppet-master-unicorn-3.8.7-23 is installed AND rubygem-puppet-master-unicorn is signed with openSUSE key OR rubygem-puppet-vim-3.8.7-23 is installed AND rubygem-puppet-vim is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP2 is installed AND puppet-3.8.5-15.9 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP3 is installed AND puppet-3.8.5-15.9 is installed OR Package Information SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND puppet-3.8.5-15.9 is installed OR puppet-server-3.8.5-15.9 is installed OR ruby2.1-rubygem-puppet-4.8.1-32.3 is installed OR rubygem-puppet-4.8.1-32.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed AND puppet-3.8.5-15.9.1 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Desktop 12 SP3 is installed AND puppet-3.8.5-15.9.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed AND puppet-3.8.5-15.9 is installed OR Package Information SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND puppet-3.8.5-15.9 is installed OR puppet-server-3.8.5-15.9 is installed OR ruby2.1-rubygem-puppet-4.8.1-32.3 is installed OR rubygem-puppet-4.8.1-32.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND puppet is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed AND puppet-3.8.5-15.9.1 is installed OR Package Information SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Desktop 12 SP3 is installed AND puppet-3.8.5-15.9.1 is installed OR Package Information SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND puppet-3.8.5-15.9.1 is installed OR puppet-server-3.8.5-15.9.1 is installed OR ruby2.1-rubygem-puppet-4.8.1-32.3.1 is installed OR rubygem-puppet-4.8.1-32.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 is installed OR SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed OR SUSE Linux Enterprise Server 12 is installed OR SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND Package Information puppet-3.8.5-15.9.1 is installed OR puppet-server-3.8.5-15.9.1 is installed OR ruby2.1-rubygem-puppet-4.8.1-32.3.1 is installed OR rubygem-puppet-4.8.1-32.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND puppet-3.8.5-15.9.1 is installed
BACK