Werk #10432: cmk-update-agent.exe: Fix security issue on Windows

Component Agent bakery
Title cmk-update-agent.exe: Fix security issue on Windows
Date Jan 15, 2020
Level Prominent Change
Class Security Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.0.0i1 Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.6.0p9 Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.5.0p24 Checkmk Enterprise (CEE), Checkmk MSP (CME)

Recently, a vulnerability of PyInstaller, that we use to compile the cmk-update-agent.exe executable on windows to one file, has been discovered, see here.

Only the windows version of the cmk-update-agent binary is affected. Unix versions and the python script are not affected.

We fix this issue by updating to PyIntaller 3.6.

To the list of all Werks