Fixed CVEs
Our 9.2.1 release uses Ruby 4.0.9, wich Regexp fixes from https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/. This is the result of four GitLab CVEs.
Open CVEs
| Identifier | CVSS 3.1 Score | Affects |
|---|---|---|
| CVE-2026-54696 | 3.7 | pkg:gem/json@2.18.0
|
| CVE-2026-33210 | N/A | pkg:gem/json@2.18.0
|
What's Changed
Other Changes
- Promote puppet-runtime 2026.10.23.1 into main by @OpenVoxProjectBot in #746
Full Changelog: 9.2.0...9.2.1