Skip to content

Bump golang.org/x/crypto#78

Merged
orelmisan merged 1 commit intokiagnose:mainfrom
orelmisan:update-x-crypto
Jan 20, 2025
Merged

Bump golang.org/x/crypto#78
orelmisan merged 1 commit intokiagnose:mainfrom
orelmisan:update-x-crypto

Conversation

@orelmisan
Copy link
Member

Bump to v0.31.0 in order to address CVE-2024-45337 [1][2].

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-45337
[2] https://pkg.go.dev/vuln/GO-2024-3321

Signed-off-by: Orel Misan <omisan@redhat.com>
@orelmisan orelmisan requested a review from RamLavi January 16, 2025 17:01
Copy link
Collaborator

@RamLavi RamLavi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@orelmisan
Copy link
Member Author

Tested on an OpenShift Virtualization cluster v4.18.

@orelmisan orelmisan merged commit f859897 into kiagnose:main Jan 20, 2025
5 checks passed
@orelmisan orelmisan deleted the update-x-crypto branch January 20, 2025 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants