Merge pull request #897 from imaqsood/PA-6872

(PA-6872) Upgrade Curl to address CVE-2024-6874 and CVE-2024-6197
puppetlabs · Aug 20, 2024 · ab0ed77 · ab0ed77
2 parents d9873e5 + 90a3fc0
commit ab0ed77
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/configs/components/curl.rb b/configs/components/curl.rb
@@ -6,8 +6,8 @@
  case version
  when '7.88.1'
  pkg.sha256sum 'cdb38b72e36bc5d33d5b8810f8018ece1baa29a8f215b4495e495ded82bbf3c7'
- when '8.7.1'
- pkg.sha256sum 'f91249c87f68ea00cf27c44fdfa5a78423e41e71b7d408e5901a9896d905c495'
+ when '8.9.1'
+ pkg.sha256sum '291124a007ee5111997825940b3876b3048f7d31e73e9caa681b80fe48b2dcd5'
  else
  raise "curl version #{version} has not been configured; Cannot continue."
  end

diff --git a/configs/projects/agent-runtime-main.rb b/configs/projects/agent-runtime-main.rb
@@ -14,7 +14,7 @@
  proj.setting :augeas_version, '1.14.1'
  end
 
- proj.setting :curl_version, '8.7.1'
+ proj.setting :curl_version, '8.9.1'
 
  ########
  # Load shared agent settings