Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MGMT-16587: Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 #6109

Merged
merged 1 commit into from Mar 26, 2024
Merged

MGMT-16587: Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 #6109

merged 1 commit into from Mar 26, 2024

Commits on Mar 26, 2024

  1. MGMT-16587: Migrate from dockertest to testcontainers to mitigate CVE… 

    …-2024-21626

This PR is to address CVE-2024-21626 which is ultimately caused by a vulnerable dependency on runc < 1.1.12
The dockertest library that is used for instantiation of a database container in some of our unit tests appears to use a vulnerable version of this library.
The dockertest project has not had much activity in the last 12 months.

This PR migrates away from Dockertest by removing the library and all code that uses it, replacing this instead with an implementation to use TestContainers-Go.
TestContainers is a much more supported and updated library with more maintainers and has up to date dependencies, including a non vulnerable version of runc.
    @paul-maidment
    paul-maidment committed Mar 26, 2024
    Copy the full SHA
    c6246aa View commit details
    Browse the repository at this point in the history