Debian Security Advisory DSA 2831-1 (puppet - insecure temporary files)

Summary
An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system.
Solution
For the oldstable distribution (squeeze), this problem has been fixed in version 2.6.2-5+squeeze9. For the stable distribution (wheezy), this problem has been fixed in version 2.7.23-1~deb7u2. For the testing distribution (jessie), this problem has been fixed in version 3.4.0-1. For the unstable distribution (sid), this problem has been fixed in version 3.4.0-1. We recommend that you upgrade your puppet packages.
Insight
This package contains the startup script and compatbility scripts for the puppet agent, which is the process responsible for configuring the local node.
Affected
puppet on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References