> Debian Trapperkeeper Authorization Fixes Host ACL Checks
[DATE: 04/11/2026 19:09]
[LANGUAGE: EN]
It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could allow a Puppet client to download the catalogue of a different host. For the stable distribution (trixie), this problem has been fixed in