-
Notifications
You must be signed in to change notification settings - Fork 145
Closed
puppetlabs/puppet-runtime
#909Labels
bugSomething isn't workingSomething isn't workingtriagedJira issue has been created for thisJira issue has been created for this
Description
Puppet agent 8.x is using the OpenSSL 3.0.x branch and a new version of Openssl 3.0.15 was just announced that has two CVE fixes.
https://openssl-library.org/news/openssl-3.0-notes/index.html is the link to the release announcement
And the two CVEs that are fixed are:
The latest puppet-agent we have on the 8.x stream is using this runtime, which is using OpenSSL 3.0.14: https://github.com/puppetlabs/puppet-runtime/blob/202407160/configs/components/openssl-3.0.rb#L2.
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't workingtriagedJira issue has been created for thisJira issue has been created for this