Werk #10432: cmk-update-agent.exe: Fix security issue on Windows
Komponente | Agent bakery |
Titel | cmk-update-agent.exe: Fix security issue on Windows |
Datum | 15.01.2020 |
Checkmk Edition | Checkmk Enterprise (CEE) |
Checkmk-Version | 1.5.0p24 1.6.0p9 2.0.0i1 |
Level | Bedeutende Änderung |
Klasse | Sicherheitsfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
Recently, a vulnerability of PyInstaller, that we use to compile the cmk-update-agent.exe executable on windows to one file, has been discovered, see here.
Only the windows version of the cmk-update-agent binary is affected. Unix versions and the python script are not affected.
We fix this issue by updating to PyIntaller 3.6.