Werk #10432: cmk-update-agent.exe: Fix security issue on Windows

Component Agent bakery
Title cmk-update-agent.exe: Fix security issue on Windows
Date Jan 15, 2020
Checkmk Edition Checkmk Enterprise (CEE)
Checkmk Version 1.5.0p24 1.6.0p9 2.0.0i1
Level Prominent Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Recently, a vulnerability of PyInstaller, that we use to compile the cmk-update-agent.exe executable on windows to one file, has been discovered, see here.

Only the windows version of the cmk-update-agent binary is affected. Unix versions and the python script are not affected.

We fix this issue by updating to PyIntaller 3.6.

To the list of all Werks