New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security related bumps in Go and BCI #253

Merged

brandond merged 1 commit into rancher:master from macedogm:security-bumps

Jul 24, 2023

Member

macedogm commented Jul 24, 2023

Update BCI from 15.4 to 15.5.
Update (only patch bump) github.com/docker/distribution to v2.8.2 in main go.mod to fix CVEs.
Update (only patch bump) k8s.io/kubernetes to v1.25.12, and its related dependencies, in main go.mod to fix CVEs.
Only update Go version to 1.19 in pkg/apis/go.mod to reflect the same version in the main go.mod. This also helps reduce the false positive noise from security scanners.


          Security related bumps in Go and BCI

Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>

macedogm requested review from brandond and brooksn

July 24, 2023 19:03

brandond approved these changes

View reviewed changes

brandond merged commit 23f7fe0 into rancher:master

1 check passed

macedogm deleted the security-bumps branch

July 24, 2023 19:45

macedogm mentioned this pull request

Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #241

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment