How to mitigate the 0-day Apache path traversal vulnerability with Puppet o

3 years ago puppet.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

Puppet is the industry standard for IT automation. Puppet Compass is your learning portal for tools and best practices to address common business challenges.

If the package is managed by Puppet, use the Instances selector to drill in and then click Copy path to quickly find the spot in your codebase you need to update with a newer version.

If you have instances in which the package is not managed by Puppet, then use a Puppet Task to push a package update to these nodes.

Whether you choose to use Puppet Enterprise or Bolt to mitigate your exposure, once you're finished you can go back and verify that the vulnerable nodes have been upgraded.

DevOps Articles