Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2023-44487 #3202

Merged
merged 2 commits into from
Nov 14, 2023
Merged

CVE-2023-44487 #3202

merged 2 commits into from
Nov 14, 2023

Conversation

spolti
Copy link
Contributor

@spolti spolti commented Oct 26, 2023

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Type of changes
Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Feature/Issue validation/testing:

Please describe the tests that you ran to verify your changes and relevant result summary. Provide instructions so it can be reproduced.
Please also list any relevant details for your test configuration.

  • Test A

  • Test B

  • Logs

Special notes for your reviewer:

  1. Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.

Checklist:

  • Have you added unit/e2e tests that prove your fix is effective or that this feature works?
  • Has code been commented, particularly in hard-to-understand areas?
  • Have you made corresponding changes to the documentation?

Release note:


core: Core dependencies update: x/net and grpc

Signed-off-by: Spolti <fspolti@redhat.com>
@spolti spolti changed the title [RHODS-12555] - CVE-2023-44487 CVE-2023-44487 Oct 31, 2023
agent.Dockerfile Outdated
RUN go mod download

COPY pkg/ pkg/
COPY cmd/ cmd/
RUN go mod tidy
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May you, please, remove changes to this file?
The go mod tidy is more a dev command that should not be called here when doing the build.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh yeah, it is a left over that I forgot to remove.
thanks

agent.Dockerfile Outdated Show resolved Hide resolved
Signed-off-by: Filippe Spolti <filippespolti@gmail.com>
@yuzisun
Copy link
Member

yuzisun commented Nov 14, 2023

/lgtm
/approve

@kserve-oss-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: spolti, yuzisun

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kserve-oss-bot kserve-oss-bot merged commit bd5a5d9 into kserve:master Nov 14, 2023
58 checks passed
@spolti spolti deleted the CVE-2023-44487 branch November 15, 2023 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants