Skip to content

(PA-6291): Applied curl patches to curl 7.88.1 #810

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 2, 2024
Merged

(PA-6291): Applied curl patches to curl 7.88.1 #810

merged 1 commit into from
Apr 2, 2024

Conversation

@span786
Copy link
Contributor

@span786 span786 commented Apr 1, 2024

Applied following curl patches to curl 7.88.1:

  1. CVE-2024-2004
  2. CVE-2024-2398

@span786 span786 requested review from a team as code owners April 1, 2024 12:16
@span786 span786 marked this pull request as draft April 1, 2024 12:17
@joshcooper
Copy link
Collaborator

joshcooper commented Apr 1, 2024 •
edited
Loading

@span786 I migrated the GH issue to this repo and the Jira ticket to the PA project. Can you update the Jira reference in your git commit to PA-6291?

@joshcooper joshcooper changed the title (PUP-12030): Applied curl patches to curl 7.88.1 (PA-6291): Applied curl patches to curl 7.88.1 Apr 1, 2024
@span786 span786 force-pushed the PUP-12030-puppet-agents-packaged-curl-is-vulnerable-to-cve-2024-2004-and-cve-2024-2398 branch from 0f97836 to bbbba3d Compare April 2, 2024 04:36
@span786
Copy link
Contributor Author

span786 commented Apr 2, 2024

Vanagon Generic Builder pipeline links for agent-runtime:

  1. main
  2. 2021.7.x

@span786 span786 marked this pull request as ready for review April 2, 2024 04:39
@joshcooper joshcooper merged commit 4ac018d into puppetlabs:master Apr 2, 2024
@joshcooper joshcooper mentioned this pull request Apr 2, 2024
Closed
@joshcooper joshcooper added the enhancement New feature or request label Apr 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@joshcooper joshcooper joshcooper approved these changes

Assignees

No one assigned

Labels

enhancement New feature or request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@span786 @joshcooper