New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Automated cherry pick of #112693: Fixed (CVE-2022-27664) Bump golang.org/x/net to #113425
Automated cherry pick of #112693: Fixed (CVE-2022-27664) Bump golang.org/x/net to #113425
Conversation
…07-c63010009c80 Fixed https://pkg.go.dev/vuln/GO-2022-0969 Signed-off-by: aimuz <mr.imuz@gmail.com>
Hi @aimuz. Thanks for your PR. I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/lgtm |
@xmudrii Okay, I'll cherry-pick the past |
/lgtm |
/cc kubernetes/release-managers |
/cc @kubernetes/release-managers |
/triage accepted |
Hi @cpanato Could you please help to approve this? The PR is blocked by the |
@RainbowMango We are past cherry-pick deadline for the November patch releases. We'll resume merging cherry-picks starting next week. |
Do you mean this will not be included in the coming v1.25.4? |
@RainbowMango That's right -- it'll not be included in the upcoming 1.25.4 patch release. |
What a pity! But thanks for the notice. |
cc @kubernetes/release-managers this is ready for 1.25 we're still working on prereqs for getting the fix merged to earlier branches, but it is worthwhile to get it into 1.25 at least |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: aimuz, liggitt, xmudrii The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/retest |
Cherry pick of #112693 on release-1.25.
#112693: Fixed (CVE-2022-27664) Bump golang.org/x/net to
For details on the cherry pick process, see the cherry pick requests page.