Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update golang.org/x/net to fix CVE-2022-41717 #1396

Merged
merged 1 commit into from
Dec 18, 2022
Merged

Update golang.org/x/net to fix CVE-2022-41717 #1396

merged 1 commit into from
Dec 18, 2022

Conversation

LionelJouin
Copy link
Member

Description

golang.org/x/net must be updated to fix https://nvd.nist.gov/vuln/detail/CVE-2022-41717

Scan from Trivy:
Library: golang.org/x/net
Vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2022-41717
Severity: MEDIUM
Installed version: v0.2.0
Fixed Version: v0.4.0

grpc-health-probe will be fixed in grpc-ecosystem/grpc-health-probe#129

Issue link

/

How Has This Been Tested?

  • Added unit testing to cover
  • Tested manually
  • Tested by integration testing
  • Have not tested

Types of changes

  • Bug fix
  • New functionallity
  • Documentation
  • Refactoring
  • CI

@LionelJouin
Update golang.org/x/net to fix CVE-2022-41717
608701e 
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
@denis-tingaikin denis-tingaikin merged commit 12616b1 into networkservicemesh:main Dec 18, 2022
nsmbot pushed a commit to networkservicemesh/cmd-map-ip-k8s that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
e1cdb76 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-admission-webhook-k8s that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
b658f2b 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-cluster-info-k8s that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
b30552a 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-kernel that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
d10c4f3 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
89ff56a 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-ipam-vl3 that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
539f884 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-vfio that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
cada3e3 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-remote-vlan that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
46a1f42 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-k8s that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
68fed0f 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-proxy-dns that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
6c4ed66 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr-proxy that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
d9ab4d4 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsc-init that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
5459e04 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-memory that referenced this pull request Dec 18, 2022
Update go.mod and go.sum to latest version from networkservicemesh/sd…
e1b4937 
…k@main

PR link: networkservicemesh/sdk#1396

Commit: 12616b1
Author: Lionel Jouin
Date: 2022-12-18 18:55:27 +0100
Message:
  - Update golang.org/x/net to fix CVE-2022-41717 (#1396)
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
This was referenced Dec 18, 2022
Merged
Merged
Merged
Merged
Merged
Merged
Merged
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@denis-tingaikin denis-tingaikin denis-tingaikin approved these changes

@NikitaSkrynnik NikitaSkrynnik Awaiting requested review from NikitaSkrynnik

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@LionelJouin @denis-tingaikin