Puppet agent running on vulnerable version of Ruby #79
Unanswered
nivdahan18
asked this question in
Troubleshooting
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
Im trying to figure out how to cover this vulnerably CVE-2024-27281.
According to the release notes , the 2 last puppet agents version (7.31.0 and 7.32.1) should cover CVE-2024-27280 and CVE-2024-27282 which should cover same things as CVE-2024-27281.
After upgrading to both version seems like ruby is still running on version 2.7 which is vulnerable.
Am I missing something ? any idea how to patch it?
Thanks
Niv
Beta Was this translation helpful? Give feedback.
All reactions