puppetlabs / puppet-runtime

runtime dependencies for Vanagon projects
Apache License 2.0
5 stars 88 forks source link

Patch Curl 7 in agent-runtime#7.x for CVE-2024-8096 #913

Closed cthorn42 closed 1 week ago

cthorn42 commented 2 months ago

Curl recently announced a new CVE affects the patching curl 7 version we're using for agent-runtime#7.x We should apply this patch https://github.com/curl/curl/commit/aeb1a281cab13c7ba?diff=split&w=1 to our Curl 7.

github-actions[bot] commented 2 months ago

Migrated issue to PA-6961