Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2023-48795 #598

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

LionelJouin
Copy link
Member

Update of golang.org/x/crypto to v0.17.0

Update of golang.org/x/crypto to v0.17.0

Signed-off-by: Lionel Jouin <[email protected]>
@denis-tingaikin
Copy link
Member

LGTM.

Also, good news: our scanner saw the problem: https://github.com/networkservicemesh/deployments-k8s/security/code-scanning/2206.

Could we update this in the SDK repo? https://github.com/networkservicemesh/sdk/blob/main/go.mod#L99 

In this case, all apps will be updated automatically.

nsmbot pushed a commit that referenced this pull request Jul 3, 2024
…k-sriov@main

PR link: networkservicemesh/sdk-sriov#598

Commit: ae1fe8a
Author: Network Service Mesh Bot
Date: 2024-07-03 09:10:22 -0500
Message:
  - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#598)
PR link: networkservicemesh/sdk-kernel#667
Commit: 1a94ab6
Author: Network Service Mesh Bot
Date: 2024-07-03 09:04:52 -0500
Message:
    - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#667)
PR link: networkservicemesh/sdk#1645
Commit: bf440a3
Author: Denis Tingaikin
Date: 2024-07-03 17:02:01 +0300
Message:
        - Revert authorize changes (#1645)
* Revert "Add peer cleanup on Requests and Closes from begin (#1636)"
This reverts commit c01f9e1008513cb1a49aea56f1b74ce240f9c3ba.
* Revert "fix authorize (#1637)"
This reverts commit 50c0908267dec982170bcf65cdf4bbb41c3bb51f.
* fix ci issue
---------
Signed-off-by: NSMBot <[email protected]>
nsmbot added a commit that referenced this pull request Jul 3, 2024
…k-sriov@main (#636)

PR link: networkservicemesh/sdk-sriov#598

Commit: ae1fe8a
Author: Network Service Mesh Bot
Date: 2024-07-03 09:10:22 -0500
Message:
  - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#598)
PR link: networkservicemesh/sdk-kernel#667
Commit: 1a94ab6
Author: Network Service Mesh Bot
Date: 2024-07-03 09:04:52 -0500
Message:
    - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#667)
PR link: networkservicemesh/sdk#1645
Commit: bf440a3
Author: Denis Tingaikin
Date: 2024-07-03 17:02:01 +0300
Message:
        - Revert authorize changes (#1645)
* Revert "Add peer cleanup on Requests and Closes from begin (#1636)"
This reverts commit c01f9e1008513cb1a49aea56f1b74ce240f9c3ba.
* Revert "fix authorize (#1637)"
This reverts commit 50c0908267dec982170bcf65cdf4bbb41c3bb51f.
* fix ci issue
---------

Signed-off-by: NSMBot <[email protected]>
Co-authored-by: NSMBot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants