Skip to content

Commit a8d9a8f

Browse files
peirulupeirulu
authored
Fix CVE for autoscaler earlier version (#5207)
1 parent 654b130 commit a8d9a8f

12 files changed

+409
-358
lines changed

‎projects/kubernetes/autoscaler/1-29/ATTRIBUTION.txt‎

Lines changed: 43 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -816,7 +816,7 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
816816
------
817817

818818
** github.com/imdario/mergo; version v0.3.15 --
819-
https://github.com/imdario/mergo
819+
https://github.com/darccio/mergo
820820

821821
Copyright (c) 2013 Dario Castañé. All rights reserved.
822822
Copyright (c) 2012 The Go Authors. All rights reserved.
@@ -992,78 +992,60 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
992992
** golang.org/go; version go1.24.13 --
993993
https://github.com/golang/go
994994

995-
996-
<html>
997-
<head>
998-
<meta content="origin" name="referrer">
999-
<title>Rate limit &middot; GitHub</title>
1000-
<meta name="viewport" content="width=device-width">
1001-
<style type="text/css" media="screen">
1002-
body {
1003-
background-color: #f6f8fa;
1004-
color: rgba(0, 0, 0, 0.5);
1005-
font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol;
1006-
font-size: 14px;
1007-
line-height: 1.5;
1008-
}
1009-
.c { margin: 50px auto; max-width: 600px; text-align: center; padding: 0 24px; }
1010-
a { text-decoration: none; }
1011-
a:hover { text-decoration: underline; }
1012-
h1 { color: #24292e; line-height: 60px; font-size: 48px; font-weight: 300; margin: 0px; }
1013-
p { margin: 20px 0 40px; }
1014-
#s { margin-top: 35px; }
1015-
#s a {
1016-
color: #666666;
1017-
font-weight: 200;
1018-
font-size: 14px;
1019-
margin: 0 10px;
1020-
}
1021-
</style>
1022-
</head>
1023-
<body>
1024-
<div class="c">
1025-
<h1>Access has been restricted</h1>
1026-
<p>You have triggered a rate limit.<br><br>
1027-
Please wait a few minutes before you try again;<br>
1028-
in some cases this may take up to an hour.
1029-
</p>
1030-
<div id="s">
1031-
<a href="https://support.github.com">Contact Support</a> &mdash;
1032-
<a href="https://githubstatus.com">GitHub Status</a> &mdash;
1033-
<a href="https://twitter.com/githubstatus">@githubstatus</a>
1034-
</div>
1035-
</div>
1036-
</body>
1037-
</html>
1038-
1039-
1040-
1041-
------
1042-
1043-
** golang.org/x/crypto; version v0.22.0 --
995+
** golang.org/x/crypto; version v0.45.0 --
1044996
https://golang.org/x/crypto
1045997

1046-
** golang.org/x/exp; version v0.0.0-20230905200255-921286631fa9 --
1047-
https://golang.org/x/exp
1048-
1049-
** golang.org/x/net; version v0.24.0 --
998+
** golang.org/x/net; version v0.47.0 --
1050999
https://golang.org/x/net
10511000

1052-
** golang.org/x/oauth2; version v0.11.0 --
1053-
https://golang.org/x/oauth2
1054-
1055-
** golang.org/x/sync/singleflight; version v0.7.0 --
1001+
** golang.org/x/sync/singleflight; version v0.18.0 --
10561002
https://golang.org/x/sync
10571003

1058-
** golang.org/x/sys/unix; version v0.19.0 --
1004+
** golang.org/x/sys/unix; version v0.38.0 --
10591005
https://golang.org/x/sys
10601006

1061-
** golang.org/x/term; version v0.19.0 --
1007+
** golang.org/x/term; version v0.37.0 --
10621008
https://golang.org/x/term
10631009

1064-
** golang.org/x/text; version v0.14.0 --
1010+
** golang.org/x/text; version v0.31.0 --
10651011
https://golang.org/x/text
10661012

1013+
Copyright 2009 The Go Authors.
1014+
1015+
Redistribution and use in source and binary forms, with or without
1016+
modification, are permitted provided that the following conditions are
1017+
met:
1018+
1019+
* Redistributions of source code must retain the above copyright
1020+
notice, this list of conditions and the following disclaimer.
1021+
* Redistributions in binary form must reproduce the above
1022+
copyright notice, this list of conditions and the following disclaimer
1023+
in the documentation and/or other materials provided with the
1024+
distribution.
1025+
* Neither the name of Google LLC nor the names of its
1026+
contributors may be used to endorse or promote products derived from
1027+
this software without specific prior written permission.
1028+
1029+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
1030+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
1031+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
1032+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
1033+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
1034+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
1035+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
1036+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
1037+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
1038+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
1039+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
1040+
1041+
------
1042+
1043+
** golang.org/x/exp; version v0.0.0-20230905200255-921286631fa9 --
1044+
https://golang.org/x/exp
1045+
1046+
** golang.org/x/oauth2; version v0.11.0 --
1047+
https://golang.org/x/oauth2
1048+
10671049
** golang.org/x/time/rate; version v0.5.0 --
10681050
https://golang.org/x/time
10691051

‎projects/kubernetes/autoscaler/1-29/CHECKSUMS‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
5b4afb1f38027f8349a834aae68b6275868f1916c8be77b5e5478477495786c2 _output/1-29/bin/autoscaler/linux-amd64/cluster-autoscaler
2-
c890efb9596f1c0a9a45bcf473e2b75fcf5824311a8a2c792ea94e3dac9ef71a _output/1-29/bin/autoscaler/linux-arm64/cluster-autoscaler
1+
86d799c5a09fe96eeda38ab2275ef9574c596b30c715a9db89263e4f385c8ef3 _output/1-29/bin/autoscaler/linux-amd64/cluster-autoscaler
2+
44808f5a53fbc9e4865bf1f8a0391bb0c578652a3a150a732a59c8464cfd7a14 _output/1-29/bin/autoscaler/linux-arm64/cluster-autoscaler

0 commit comments

Comments
 (0)