Jira (PUP-11596) CVE-2022-28738: Puppet-agent 5.5.x and 6.x releases

[Sanjay Tripathi (Jira)]

Title: Message Title

Sanjay Tripathi created an issue   Puppet / PUP-11596 CVE-2022-28738: Puppet-agent 5.5.x and 6.x releases Issue Type: Bug Affects Versions: PUP 6.25.1, PUP 6.16.0, PUP 5.5.14 Assignee: Unassigned Created: 2022/07/25 10:16 AM Priority: Blocker Reporter: Sanjay Tripathi Puppet Version: 5.5.14, 6.16.0, 6.25.1 Puppet Server Version: N/A OS Name/Version: ALL Ruby has released fixes for CVE-2022-28738.  When does Puppet plan to address Ruby CVE-2022-28738 for older version of Puppet-Agent? We use 5.5.14, 6.16.0 and 6.25.1 Open-Source Puppet-agents and would like to know Puppet's plans to address CVE-2022-28738 in these older Puppet-agent versions. Thanks. Add Comment   This message was sent by Atlassian Jira (v8.20.11#820011-sha1:0629dd8) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.456642.1658769371000.2988.1658769420066%40Atlassian.JIRA.