CVSS 3 Base Score:

Posted On:

Assessed Risk Level:
Low

On December 9, 2020, curl published security updates addressing CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286. Previous releases of Puppet Agent contain a vulnerable version of curl. Puppet Agent 7.1.0 contain an updated version of curl that has patched the vulnerability

For more information about this vulnerability, refer to the security announcements for:

Status:

Affected software versions:

- Puppet Agent prior to 7.1.0

Resolved in:

- Puppet Agent 7.1.0