Skip to content

Update OpenSSL to 3.0.15 for puppet-agent#main #2554

@cthorn42

Description

@cthorn42

Puppet agent 8.x is using the OpenSSL 3.0.x branch and a new version of Openssl 3.0.15 was just announced that has two CVE fixes.
https://openssl-library.org/news/openssl-3.0-notes/index.html is the link to the release announcement
And the two CVEs that are fixed are:

The latest puppet-agent we have on the 8.x stream is using this runtime, which is using OpenSSL 3.0.14: https://github.com/puppetlabs/puppet-runtime/blob/202407160/configs/components/openssl-3.0.rb#L2.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingtriagedJira issue has been created for this

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions