Ubuntu Security Notice 3567-1 – It was discovered that Puppet incorrectly handled permissions when unpacking certain tarballs. A local user could possibly use this issue to execute arbitrary code.

Source: Ubuntu Security Notice USN-3567-1