Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for CVE-2022-21698 for Function-Controller #13516

Merged
merged 2 commits into from Mar 2, 2022

Conversation

Cortey
Copy link
Contributor

@Cortey Cortey commented Feb 28, 2022

Description
Fix for CVE-2022-21698
Related issue(s)
See also release v1.11.1

@kyma-bot kyma-bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Feb 28, 2022
@kyma-bot kyma-bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Feb 28, 2022
@Cortey Cortey added area/serverless Issues or PRs related to serverless security/high Related to CVSSv3 security rating https://www.first.org/cvss/calculator/3.0 size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Feb 28, 2022
@Cortey
Copy link
Contributor Author

Cortey commented Mar 1, 2022

/retest

@Cortey
Copy link
Contributor Author

Cortey commented Mar 2, 2022

/test pre-main-serverless-integration-k3s

1 similar comment
@Cortey
Copy link
Contributor Author

Cortey commented Mar 2, 2022

/test pre-main-serverless-integration-k3s

@kyma-bot kyma-bot added the lgtm Looks good to me! label Mar 2, 2022
@Cortey
Copy link
Contributor Author

Cortey commented Mar 2, 2022

/retest pre-main-kyma-gke-external-registry

@kyma-bot
Copy link
Contributor

kyma-bot commented Mar 2, 2022

@Cortey: The /retest command does not accept any targets.
The following commands are available to trigger required jobs:

  • /test kyma-metadata-schema-governance
  • /test pre-kyma-artifacts
  • /test pre-kyma-components-application-broker
  • /test pre-kyma-components-application-connectivity-certs-setup-job
  • /test pre-kyma-components-application-registry
  • /test pre-kyma-components-central-application-connectivity-validator
  • /test pre-kyma-components-central-application-gateway
  • /test pre-kyma-components-compass-runtime-agent
  • /test pre-kyma-components-connection-token-handler
  • /test pre-kyma-components-connector-service
  • /test pre-kyma-components-event-publisher-proxy
  • /test pre-kyma-components-eventing-controller
  • /test pre-kyma-components-function-controller
  • /test pre-kyma-components-function-runtimes
  • /test pre-kyma-components-istio-installer
  • /test pre-kyma-components-service-binding-usage-controller
  • /test pre-kyma-components-telemetry-operator
  • /test pre-kyma-components-uaa-activator
  • /test pre-kyma-tests-application-connector-tests
  • /test pre-kyma-tests-application-registry-tests
  • /test pre-kyma-tests-compass-runtime-agent
  • /test pre-kyma-tests-connection-token-handler-tests
  • /test pre-kyma-tests-connector-service-tests
  • /test pre-kyma-tests-function-controller
  • /test pre-kyma-tests-integration-api-gateway
  • /test pre-kyma-tests-rafter
  • /test pre-kyma-tests-serverless-bench
  • /test pre-kyma-tests-service-catalog
  • /test pre-main-kyma-common
  • /test pre-main-kyma-gke-external-registry
  • /test pre-main-kyma-governance
  • /test pre-main-kyma-integration-k3d
  • /test pre-main-kyma-integration-k3d-central-app-connectivity
  • /test pre-main-kyma-integration-k3d-central-app-connectivity-compass
  • /test pre-main-kyma-integration-k3d-telemetry
  • /test pre-main-kyma-protecode-guard
  • /test pre-main-kyma-validate-dockerfiles
  • /test pre-main-serverless-integration-k3s

The following commands are available to trigger optional jobs:

  • /test pre-kyma-components-busola-migrator
  • /test pre-kyma-tools-event-subscriber
  • /test pre-kyma-tools-gitserver
  • /test pre-main-check-users-map
  • /test pre-main-kyma-component-descriptors
  • /test pre-main-kyma-gardener-azure-alpha-eval
  • /test pre-main-kyma-gardener-azure-alpha-prod
  • /test pre-main-kyma-gardener-azure-fast-integration
  • /test pre-main-kyma-gardener-gcp-eventing
  • /test pre-main-kyma-gardener-gcp-eventing-upgrade
  • /test pre-main-kyma-integration-k3d-compass-dev
  • /test pre-main-kyma-skr-eventing
  • /test pre-main-kyma-validate-image-definitions

Use /test all to run the following jobs that were automatically triggered:

  • pre-kyma-artifacts
  • pre-kyma-components-function-controller
  • pre-main-check-users-map
  • pre-main-kyma-component-descriptors
  • pre-main-kyma-gardener-azure-alpha-eval
  • pre-main-kyma-gardener-azure-alpha-prod
  • pre-main-kyma-gke-external-registry
  • pre-main-kyma-integration-k3d
  • pre-main-kyma-integration-k3d-central-app-connectivity
  • pre-main-kyma-integration-k3d-central-app-connectivity-compass
  • pre-main-kyma-integration-k3d-compass-dev
  • pre-main-kyma-protecode-guard
  • pre-main-kyma-validate-image-definitions
  • pre-main-serverless-integration-k3s

In response to this:

/retest pre-main-kyma-gke-external-registry

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@kyma-bot kyma-bot merged commit 09a39b5 into kyma-project:main Mar 2, 2022
@Cortey Cortey deleted the security branch March 2, 2022 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/serverless Issues or PRs related to serverless lgtm Looks good to me! security/high Related to CVSSv3 security rating https://www.first.org/cvss/calculator/3.0 size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants