CVE-2017-10689: Tarball permission preservation in puppet – CVSS 5.5 · Watchpost