Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade haproxy to 2.6.12 to avoid CVE-2023-0464 #13388

Merged
merged 1 commit into from
May 1, 2023

Conversation

34fathombelow
Copy link
Member

@34fathombelow 34fathombelow commented May 1, 2023

Also need to cherry-pick/2.7

Note: Do not cherry pick to 2.4, we use a different version of HAProxy.

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
@codecov
Copy link

codecov bot commented May 1, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (a695aa8) 49.15% compared to head (659c142) 49.15%.

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #13388   +/-   ##
=======================================
  Coverage   49.15%   49.15%           
=======================================
  Files         248      248           
  Lines       42891    42891           
=======================================
  Hits        21082    21082           
  Misses      19691    19691           
  Partials     2118     2118           

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@crenshaw-dev
Copy link
Collaborator

/cherry-pick release-2.5

@crenshaw-dev
Copy link
Collaborator

/cherry-pick release-2.6

@crenshaw-dev
Copy link
Collaborator

/cherry-pick release-2.7

@crenshaw-dev crenshaw-dev merged commit cac553a into argoproj:master May 1, 2023
30 of 31 checks passed
gcp-cherry-pick-bot bot pushed a commit that referenced this pull request May 1, 2023
Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
gcp-cherry-pick-bot bot pushed a commit that referenced this pull request May 1, 2023
Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
gcp-cherry-pick-bot bot pushed a commit that referenced this pull request May 1, 2023
Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
crenshaw-dev pushed a commit that referenced this pull request May 1, 2023
)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Co-authored-by: Justin Marquis <34fathombelow@protonmail.com>
crenshaw-dev pushed a commit that referenced this pull request May 1, 2023
)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Co-authored-by: Justin Marquis <34fathombelow@protonmail.com>
crenshaw-dev pushed a commit that referenced this pull request May 1, 2023
)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Co-authored-by: Justin Marquis <34fathombelow@protonmail.com>
@34fathombelow 34fathombelow deleted the haproxy-cve-fix branch May 9, 2023 00:20
schakrad pushed a commit to schakrad/argo-cd that referenced this pull request Jul 24, 2023
…) (argoproj#13401)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Co-authored-by: Justin Marquis <34fathombelow@protonmail.com>
Signed-off-by: schakrad <58915923+schakrad@users.noreply.github.com>
yyzxw pushed a commit to yyzxw/argo-cd that referenced this pull request Aug 9, 2023
Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants