Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(PA-6291): Applied curl patches to curl 7.88.1 #810

Conversation

span786
Copy link
Contributor

@span786 span786 commented Apr 1, 2024

Applied following curl patches to curl 7.88.1:

  1. CVE-2024-2004
  2. CVE-2024-2398

@span786 span786 requested review from a team as code owners April 1, 2024 12:16
@span786 span786 marked this pull request as draft April 1, 2024 12:17
@joshcooper
Copy link
Contributor

joshcooper commented Apr 1, 2024

@span786 I migrated the GH issue to this repo and the Jira ticket to the PA project. Can you update the Jira reference in your git commit to PA-6291?

@joshcooper joshcooper changed the title (PUP-12030): Applied curl patches to curl 7.88.1 (PA-6291): Applied curl patches to curl 7.88.1 Apr 1, 2024
@span786 span786 force-pushed the PUP-12030-puppet-agents-packaged-curl-is-vulnerable-to-cve-2024-2004-and-cve-2024-2398 branch from 0f97836 to bbbba3d Compare April 2, 2024 04:36
@span786
Copy link
Contributor Author

span786 commented Apr 2, 2024

Vanagon Generic Builder pipeline links for agent-runtime:

  1. main
  2. 2021.7.x

@span786 span786 marked this pull request as ready for review April 2, 2024 04:39
@joshcooper joshcooper merged commit 4ac018d into puppetlabs:master Apr 2, 2024
3 checks passed
@joshcooper joshcooper added the enhancement New feature or request label Apr 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants