Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for go uplift to 1.22.7 version and have fix for CVE-2024-24790 #1354

Closed
smoshiur1237 opened this issue Nov 11, 2024 · 2 comments
Closed

Support for go uplift to 1.22.7 version and have fix for CVE-2024-24790 #1354

smoshiur1237 opened this issue Nov 11, 2024 · 2 comments

Comments

@smoshiur1237
Copy link
Contributor

smoshiur1237 commented Nov 11, 2024 •
edited
Loading

We are having a vulnerability report which is related to CVE-2024-24790 and it has critical score. This can be fixed by uplifting go to 1.22.7. We would appreciate if you support and add the go uplift in your next official release..
@smoshiur1237 smoshiur1237 changed the title Support to uplift go 1.22.7 to have fix for CVE-2024-24790 Support for go uplift to 1.22.7 version and have fix for CVE-2024-24790 Nov 11, 2024
@smoshiur1237
Copy link
Contributor Author

/cc @dougbtv

@smoshiur1237 smoshiur1237 mentioned this issue Nov 12, 2024
Merged
@dougbtv
Copy link
Member

dougbtv commented Dec 6, 2024

Thanks for the report and fix! Merged in #1355, released https://github.com/k8snetworkplumbingwg/multus-cni/releases/tag/v4.1.4 to address it. Appreciate the contribution.

@dougbtv dougbtv closed this as completed Dec 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dougbtv @smoshiur1237