Fix vulnerabilities on crypto, net and sys packages and change go ver… #1774
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…sion on Docker builder stage
|
Could you please add a changelog entry and I'll get this merged, thanks |
|
Sure, changelog done! |
JoelSpeed
approved these changes
Aug 31, 2022
|
Any idea when a docker version with those fixes will be available in https://quay.io/repository/oauth2-proxy ? Thanks. |
|
I plan to cut a v7.4.0 release soon |
phntom
pushed a commit
to phntom/oauth2-proxy
that referenced
this pull request
Oct 8, 2022
oauth2-proxy#1774) * Fix vulnerabilities on crypto, net and sys packages and change go version on Docker builder stage * Changelog related PR $1774 Co-authored-by: Felipe Bonvicini Conti <felipe.conti@totvs.com.br> (cherry picked from commit ff03c43)
Hi @JoelSpeed , how soon is soon? |
|
#1862 resolves the remaining CVEs I'm aware of, so once that is merged I plan to cut a new release |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
…sion on Docker builder stage
Description
This PR fix vulnerabilities and hit go version on Docker file builder stage
Motivation and Context
Fix the vulnerabilities CVE-2022-27191, CVE-2021-44716 and CVE-2022-29526
Trivy:
How Has This Been Tested?
make testsChecklist: