> IT-Sentinel.com

// Cybersecurity & IT News Aggregator - Real-time Threat Intelligence Feed

NEWS CVE
← messages.back_to_articles

> Debian Trapperkeeper Authorization Fixes Host ACL Checks

[SOURCE] LinuxSecurity - Debian [DATE: 04/11/2026 19:09] [LANGUAGE: EN]
It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could allow a Puppet client to download the catalogue of a different host. For the stable distribution (trixie), this problem has been fixed in
[messages.read_original_source] →