Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dockerfile.*: Fix "etcd is distributed" -> "etcd is a distributed" #2

Merged
merged 1 commit into from Feb 20, 2019

Conversation

wking
Copy link
Member

@wking wking commented Feb 7, 2019

Correcting a typo from 2f10964 (version: openshift-v4.0, 2018-11-29).

CC @hexfusion

Correcting a typo from 2f10964 (version: openshift-v4.0, 2018-11-29).
@openshift-ci-robot openshift-ci-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Feb 7, 2019
@wking
Copy link
Member Author

wking commented Feb 7, 2019

rhel-images:

Pulling image openshift/golang-builder:1.10 ...
error: build error: failed to pull image: repository docke.../golang-builder not found: does not exist or no pull access

unit:

--- FAIL: TestServer_Unix_Secure_DelayTx (0.25s)
	server_test.go:109: took 186.982776ms with no latency
	server_test.go:124: took 62.396391ms with latency 50ms±5ms
	server_test.go:132: expected took1 186.982776ms < took2 62.396391ms (with latency)

and more. I expect both of those are unrelated to this change ;).

@hexfusion
Copy link

/test unit

@hexfusion
Copy link

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Feb 20, 2019
@hexfusion
Copy link

Unit tests need vetting I will look into this.

@hexfusion
Copy link

@wking thanks for the PR!

@hexfusion hexfusion merged commit 86413f5 into openshift:openshift-4.0 Feb 20, 2019
@openshift-ci-robot
Copy link

@wking: The following tests failed, say /retest to rerun them all:

Test name Commit Details Rerun command
ci/prow/rhel-images f5e8fe0 link /test rhel-images
ci/prow/unit f5e8fe0 link /test unit

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

hexfusion pushed a commit that referenced this pull request Oct 24, 2019
dusk125 pushed a commit to dusk125/etcd that referenced this pull request Jun 7, 2023
$ govulncheck ./...
govulncheck is an experimental tool. Share feedback at https://go.dev/s/govulncheck-feedback.

Scanning for dependencies with known vulnerabilities...
Found 1 known vulnerability.

Vulnerability openshift#1: GO-2022-1144
  An attacker can cause excessive memory growth in a Go server
  accepting HTTP/2 requests. HTTP/2 server connections contain a
  cache of HTTP header keys sent by the client. While the total
  number of entries in this cache is capped, an attacker sending
  very large keys can cause the server to allocate approximately
  64 MiB per open connection.

  Call stacks in your code:
      tools/etcd-dump-metrics/main.go:159:31: go.etcd.io/etcd/v3/tools/etcd-dump-metrics.main$4 calls go.etcd.io/etcd/server/v3/embed.StartEtcd, which eventually calls golang.org/x/net/http2.ConfigureServer$1

  Found in: golang.org/x/net/http2@v0.2.0
  Fixed in: golang.org/x/net/http2@v1.19.4
  More info: https://pkg.go.dev/vuln/GO-2022-1144

Vulnerability openshift#2: GO-2022-1144
  An attacker can cause excessive memory growth in a Go server
  accepting HTTP/2 requests. HTTP/2 server connections contain a
  cache of HTTP header keys sent by the client. While the total
  number of entries in this cache is capped, an attacker sending
  very large keys can cause the server to allocate approximately
  64 MiB per open connection.

  Call stacks in your code:
      contrib/lock/storage/storage.go:106:28: go.etcd.io/etcd/v3/contrib/lock/storage.main calls net/http.ListenAndServe
      contrib/raftexample/httpapi.go:113:31: go.etcd.io/etcd/v3/contrib/raftexample.serveHTTPKVAPI$1 calls net/http.Server.ListenAndServe
      tools/etcd-dump-metrics/main.go:159:31: go.etcd.io/etcd/v3/tools/etcd-dump-metrics.main$4 calls go.etcd.io/etcd/server/v3/embed.StartEtcd, which eventually calls net/http.Serve
      tools/etcd-dump-metrics/main.go:159:31: go.etcd.io/etcd/v3/tools/etcd-dump-metrics.main$4 calls go.etcd.io/etcd/server/v3/embed.StartEtcd, which eventually calls net/http.Server.Serve

  Found in: net/http@go1.19.3
  Fixed in: net/http@go1.19.4
  More info: https://pkg.go.dev/vuln/GO-2022-1144

Signed-off-by: Benjamin Wang <wachao@vmware.com>
dusk125 pushed a commit to dusk125/etcd that referenced this pull request Jun 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
lgtm Indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants