Jira (PDB-5000) Triage SEC-274 for PuppetDB and PE-PuppetDB

[Austin Blatt (Jira)]

Austin Blatt created an issue

PuppetDB / PDB-5000 Triage SEC-274 for PuppetDB and PE-PuppetDB Issue Type: Task Assignee: Austin Blatt Created: 2021/01/20 10:08 AM Priority: Normal Reporter: Austin Blatt Triage and provide a response to the CVE's in SEC-274 for pupetdb and pe-puppetdb clojure dependencies Add Comment

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)

[Austin Blatt (Jira)]

Austin Blatt updated an issue

PuppetDB / PDB-5000 Triage SEC-274 for PuppetDB and PE-PuppetDB

Change By: Austin Blatt

Triage and provide a response to the CVE's in SEC-274 for pupetdb and pe-puppetdb clojure dependencies

{noformat} Determining actual impact to the application based on how the packages are being used is useful in applying the appropriate risk score therefore some assistance is needed in determining actual impact to the application (ie, is the package utilizing the vulnerable paths). Please review the ticket (SEC-274) for details and comment responses regarding use of packages by 29 January 2021. {noformat}

Add Comment

[Austin Blatt (Jira)]

[Austin Blatt (Jira)]

Austin Blatt updated an issue

PuppetDB / PDB-5000 Triage SEC-274 for PuppetDB and PE-PuppetDB

Change By: Austin Blatt Security: Internal

Add Comment