Puppetlabs Facter vulnerabilities

• puppet facter Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata CVE-2015-1426 Fix available 2.1 LowFebruary 23, 2015
• puppet facter, hiera, puppet +2 more +4 more facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability CVE-2014-3248 Fix available 6.2 MediumJune 30, 2014