Source: mcollective Severity: important Tags: security Please see http://puppetlabs.com/security/cve/cve-2014-3251 This doesn't warrant a DSA, but it can still be fixed in a stable point update. Cheers, Moritz