New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade dependencies #21

Open

Inigo4562 wants to merge 2 commits into karlkfi:master from Inigo4562:upgrade_dependencies

Inigo4562 commented Oct 27, 2021 •

edited

Loading

This upgrades to the latest stable versions and solves these two vulnerabilities:

github.com/gogo/protobuf | CVE-2021-3121 | HIGH | v1.3.1 (installed version) | v1.3.2 (fixed version)
golang.org/x/crypto | CVE-2020-29652 | HIGH | v0.0.0-20200220183623-bac4c82f6975 (installed version) | v0.0.0-20201216223049-8b5274cf687f (fixed version)
k8s.io/client-go | CVE-2020-8565 | MEDIUM | v0.18.2 (installed version) | v0.20.0-alpha.2 (installed version)

In order to make the go build stage work, golang needs to be updated as well to 1.16

Inigo Gonzalez added 2 commits

October 27, 2021 12:36


          Upgrade dependencies

d7e4faa


          Upgrade to golang 1.16

29c42b1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet