Ubuntu Security Notice 1365-1 - It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes.
648b4fd1816af613f33cf725e789c0258711ada293334ef0d45e6c51e8463cd0