Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2022-41723 by updating golang.org/x/net dependency and upgrading Go to version 1.21 #256

Conversation

akhateeb22
Copy link
Contributor

There was a vulnerability with CVE-2022-41723, the security issue was resolved by updating golang.org/x/net dependency and updating Go to version 1.21 which is the latest version of Go until now.

vulnerability

I do check for any vulnerability after updating using trivy

fix

I also test the branch with make test

test

@akhateeb22
Copy link
Contributor Author

akhateeb22 commented Sep 10, 2023

@worldtiki Hi, There was a problem in the pipeline running unit tests because it uses Go version 1.18 and in the new pull requests some modules requires higher version, i commit a change with a new version of go in github/workflows/go.yaml

@worldtiki worldtiki merged commit 4df125b into asobti:master Sep 10, 2023
1 check passed
@worldtiki
Copy link
Collaborator

Thanks for the contribution @akhateeb22 :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants