Skip to content

Upgrade agent-runtime#main's Curl to 8.10.0 #912

@cthorn42

Description

@cthorn42

Curl announced a new version 8.10.0, that fixes a newly announced CVE: CVE-2024-8096.
Our currently released puppet-agent in the 8.x stream 8.9.0, is using Curl 8.9.1, https://github.com/puppetlabs/puppet-runtime/blob/202409030/configs/components/curl.rb#L9-L10.
We should update that to the latest version.

Metadata

Metadata

Assignees

No one assigned

    Labels

    triagedJira issue has been created for this

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions