BlogContact SalesTry Puppet 
Search Puppet.com

Puppet is the industry standard for IT automation.

Modernize, manage and bring your hybrid infrastructure into compliance through Puppet's powerful continuous automation.

Use Cases
Puppet Enterprise LogoGet Puppet Enterprise

First 10 nodes are free!

Products
Pricing & Packaging
Integrations
Puppet Education Logo
Puppet Education

Puppet Education is your learning portal for tools and best practices to address common business challenges.

Professional services
Support
Custom consulting services

Get up and running quickly with a custom solution that addresses your unique business goals and easily allows for growth as your needs evolve.

Puppet Forge

Find thousands of component modules built by the community and guidance on using them in your own infrastructure.

EcosystemOpen Source Projects
Community
Contribute
State of DevOps Report

Since launching our first DevOps survey in 2012, we’ve learned a lot about the power of DevOps to transform organizations.

Product Documentation
Resource library
Customers
Partners
Featured Partners
Servicenow Logo
Splunk Logo
Puppet Events
About Us

Puppet takes the risk out of change. We meet you where you are today and take you where you need to go.

CompanyWorking at Puppet
Press & news
Events
It's our community that makes Puppet great. Connect with Puppet users and employees.

CVE-2015-7551 - Fiddle and DL Ruby Vulnerability

  • Posted January 27, 2016

  • Assessed Risk Level: Low

On December 16, 2015 the Ruby project announced CVE-2015-7551 addressing unsafe string usage in Fiddle and DL.

Default configurations of Puppet Enterprise, Puppet Agent, and Puppet on Windows are not vulnerable. The version of Ruby shipping with Puppet Enterprise 3.8.4, Puppet Enterprise 2015.3.2, Puppet Agent 1.3.4, and Puppet 3.8.5 (Windows only) have been updated to address this vulnerability.

For more information about the vulnerability, please refer to the Ruby security announcement .

Status:

Affected Software Versions:

  • Puppet Enterprise 3.x prior to 3.8.4
  • Puppet Enterprise 2015.x prior to 2015.3.2
  • Puppet Agent 1.x prior to 1.3.4
  • Puppet 3.x prior to 3.8.5 (Windows only)

Resolved in:

  • Puppet Enterprise 3.8.4
  • Puppet Enterprise 2015.3.2
  • Puppet Agent 1.3.4
  • Puppet 3.8.5 (Windows only)