This repository has been archived by the owner on Jan 15, 2025. It is now read-only.

Upgrade agent-runtime#main's Curl to 8.10.0 #912

Closed

cthorn42 opened this issue Sep 11, 2024 · 1 comment · Fixed by #921

Labels

triaged

Collaborator

cthorn42 commented Sep 11, 2024

Curl announced a new version 8.10.0, that fixes a newly announced CVE: CVE-2024-8096.
Our currently released puppet-agent in the 8.x stream 8.9.0, is using Curl 8.9.1, https://github.com/puppetlabs/puppet-runtime/blob/202409030/configs/components/curl.rb#L9-L10.
We should update that to the latest version.

cthorn42 added the triaged label

github-actions bot commented Sep 11, 2024

Migrated issue to PA-6962

mhashizume linked a pull request

that will close this issue

(PA-6962) update curl to address CVE-2024-8096 #921

Merged

mhashizume closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.