Werk #10432: cmk-update-agent.exe: Fix security issue on Windows

Component

Agent bakery

Title

cmk-update-agent.exe: Fix security issue on Windows

Date

Jan 15, 2020

Level

Prominent Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.0.0i1	Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.6.0p9	Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.5.0p24	Checkmk Enterprise (CEE), Checkmk MSP (CME)

Recently, a vulnerability of PyInstaller, that we use to compile the cmk-update-agent.exe executable on windows to one file, has been discovered, see here.

Only the windows version of the cmk-update-agent binary is affected. Unix versions and the python script are not affected.

We fix this issue by updating to PyIntaller 3.6.

To the list of all Werks