CVE-2021-27025: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.

Affected products

• Fedoraproject Fedora: version 35 only
• Puppet Puppet: from 2021.0.0, before 2021.4.0 (fixed in 2021.4.0)
• Puppet Puppet Agent: before 6.25.1 (fixed in 6.25.1); from 5.5.0, up to and including 5.5.22; from 7.0.0, before 7.12.1 (fixed in 7.12.1)
• Puppet Puppet Enterprise: before 2019.8.9 (fixed in 2019.8.9)

Published 2021-11-18. Last modified 2026-06-17.