Hi.. Looking for information on components and sc...
# puppet-enterprise
j
Hi.. Looking for information on components and schedules for updates based on Vulnerabilities... I have a VULN CVE-2026-42246 showing up on only one of my compilers... Its for the net-imap Ruby Gem. Is there a process different then a PE upgrade that I should could use to upgrade this gem? Or is Perforce aware of this vuln and has a schedule for remediation?
j
The engineering team is aware of this one! I did a search and saw that it has been added to the list of CVEs to remediate in 2025.11 which comes out next week, if I remember correctly?
s
net-imap
is also one of the gems baked into the Ruby install -- so it is difficult to get rid of the old version without upgrading Ruby.
j
Glad to hear... Thank you! and Yes... Ruby has been a pain - Vulnerability wise lately.
j
Every component and framework seems to be getting hit in this vulnapocalypse... It seems like you have to update dependencies everyday now
truth bomb 1