Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation

[arjunrn]

Updated all k/k dependencies to address the CVE-2021-3121.

[openshift-ci]

@arjunrn: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

Updated vendored upstream dependencies

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924440, which is invalid:

• expected the bug to be open, but it isn't
• expected the bug to target the "4.7.z" release, but it targets "4.8.0" instead
• expected the bug to be in one of the following states: NEW, ASSIGNED, ON_DEV, POST, POST, but it is CLOSED (NEXTRELEASE) instead
• expected Bugzilla bug 1924440 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Bug 1924440: CVE-2021-3121 gogo/protobuf lacks certain index validation

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[arjunrn]

/bugzilla refresh

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924440, which is invalid:

• expected the bug to be open, but it isn't
• expected the bug to target the "4.7.z" release, but it targets "4.8.0" instead
• expected the bug to be in one of the following states: NEW, ASSIGNED, ON_DEV, POST, POST, but it is CLOSED (NEXTRELEASE) instead
• expected Bugzilla bug 1924440 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924428, which is invalid:

• expected the bug to target the "4.7.z" release, but it targets "4.9.0" instead
• expected Bugzilla bug 1924428 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[arjunrn]

/bugzilla refresh

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924428, which is invalid:

• expected the bug to target the "4.7.z" release, but it targets "4.9.0" instead
• expected Bugzilla bug 1924428 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[arjunrn]

/bugzilla refresh

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924428, which is invalid:

• expected Bugzilla bug 1924428 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[arjunrn]

/bugzilla refresh

[openshift-ci]

@arjunrn: This pull request references Bugzilla bug 1924428, which is invalid:

• expected the bug to target the "4.7.z" release, but it targets "4.9.0" instead
• expected Bugzilla bug 1924428 to depend on a bug targeting a release in 4.8.0 and in one of the following states: VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE), but no dependents were found

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[wking]

Waiving the Bugzilla process, because this is bumping deps to catch up with deps that have already been bumped in 4.8+.

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: arjunrn, wking

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [wking]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-bot]

/retest-required

Please review the full test history for this PR and help us cut down flakes.

[openshift-ci]

@arjunrn: All pull requests linked via external trackers have merged:

• openshift/cluster-version-operator#625

Bugzilla bug 1924428 has been moved to the MODIFIED state.

In response to this:

Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.