Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix golang vulnerabilities in kanister-tools image #2351

Merged
merged 2 commits into from
Sep 21, 2023
Merged

Fix golang vulnerabilities in kanister-tools image #2351

merged 2 commits into from
Sep 21, 2023

Conversation

pavannd1
Copy link
Contributor

Change Overview

  • Fixed golang vulnerabilities in restic - now building from source since restic does not have a new image with fixes
CVE-2023-29404 
CVE-2023-29402
CVE-2023-29405
CVE-2023-24540
CVE-2023-29400 
CVE-2023-24539   
CVE-2023-29403 
CVE-2023-39533
CVE-2023-29409
CVE-2023-29406
CVE-2023-39318
CVE-2023-39319
  • Updated the builder base-image to Go 1.21
  • Updated maintainer and description to reflect latest information

Pull request type

Please check the type of change your PR introduces:

  • 🚧 Work in Progress
  • 🌈 Refactoring (no functional changes, no api changes)
  • 🐹 Trivial/Minor
  • 🐛 Bugfix
  • 🌻 Feature
  • 🗺️ Documentation
  • 🤖 Test

Issues

  • fixes #issue-number

Test Plan

  • 💪 Manual
  • ⚡ Unit test
  • 💚 E2E

@pavannd1 pavannd1 added the kueue label Sep 21, 2023
@infraq infraq added this to In Progress in Kanister Sep 21, 2023
@pavannd1 pavannd1 mentioned this pull request Sep 21, 2023
Merged
Kanister automation moved this from In Progress to Reviewer approved Sep 21, 2023
@mergify mergify bot merged commit 08d8926 into master Sep 21, 2023
14 checks passed
Kanister automation moved this from Reviewer approved to Done Sep 21, 2023
@mergify mergify bot deleted the fix-tools-go-vuln branch September 21, 2023 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ankitjain235 ankitjain235 ankitjain235 approved these changes

@viveksinghggits viveksinghggits Awaiting requested review from viveksinghggits

Assignees
No one assigned
Labels
kueue
Projects
Kanister
Done
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@pavannd1 @ankitjain235