Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

rebase: update golang.org/x/net to v0.14 #4034

Merged
merged 1 commit into from
Aug 7, 2023
Merged

rebase: update golang.org/x/net to v0.14 #4034

merged 1 commit into from
Aug 7, 2023

Commits on Aug 7, 2023

  1. rebase: update golang.org/x/net to v0.14 

    golang.org/x/net/html v0.12 is vulnerable against CVE-2023-3978.
Exploiting it through Ceph-CSI is non-trivial, but rebasing
golang.org/x/net should take away any concerns.

See-also: https://pkg.go.dev/vuln/GO-2023-1988
Signed-off-by: Niels de Vos <ndevos@ibm.com>
    @nixpanic
    nixpanic committed Aug 7, 2023
    Configuration menu
    Copy the full SHA
    0d5c6e2 View commit details
    Browse the repository at this point in the history