Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump golang.org/x/net to 0.17.0 for CVE-2023-39325, CVE-2023-3978 and… #391

Conversation

WebberHuang1118
Copy link

@WebberHuang1118 WebberHuang1118 commented Nov 13, 2023

What this PR does / why we need it:
Bump golang.org/x/net to 0.17.0

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Bump golang.org/x/net to 0.17.0 to improve security

Special notes for your reviewer (optional):

  • Scan image with docker run -v /var/run/docker.sock:/var/run/docker.sock --rm aquasec/trivy:latest image <image>
  • Scan result on latest master image whereabouts_master_cve.txt

@WebberHuang1118 WebberHuang1118 force-pushed the bump-go-networking-libraris-0.17.0 branch from 831f798 to 6ecb95e Compare November 13, 2023 10:03
@maiqueb
Copy link
Collaborator

maiqueb commented Nov 13, 2023

Closing in lieu of #390, which was opened first.

@maiqueb maiqueb closed this Nov 13, 2023
@maiqueb
Copy link
Collaborator

maiqueb commented Nov 13, 2023

Thanks for pushing this @WebberHuang1118 though.

I have closed it since other contributor posted the same thing a few hours before.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants