Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update kubectl, helm, and go.mod deps #4099

Merged
merged 1 commit into from
Oct 23, 2023
Merged

update kubectl, helm, and go.mod deps #4099

merged 1 commit into from
Oct 23, 2023

Conversation

cbodonnell
Copy link
Contributor

@cbodonnell cbodonnell commented Oct 20, 2023 •
edited
Loading

What this PR does / why we need it:

Upgrades dependencies to resolve several CVEs.

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Steps to reproduce

Does this PR introduce a user-facing change?

* Updates the kubectl binary in the kotsadm image to resolve CVE-2023-39325, CVE-2023-3978, and CVE-2023-44487 with medium severity
* Updates the golang.org/x/net go module to version 0.17.0 to resolve CVE-2023-39325 and CVE-2023-44487 with medium severity.

Does this PR require documentation?

@cbodonnell cbodonnell merged commit 9c9bc7e into main Oct 23, 2023
269 of 270 checks passed
@cbodonnell cbodonnell deleted the cbo/update-kubectl-helm-go-mod branch October 23, 2023 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sgalsaleh sgalsaleh sgalsaleh approved these changes

Assignees
No one assigned
Labels
type::security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@cbodonnell @sgalsaleh