Skip to content

Commit a305e50

Browse files
committed
OCPBUGS-8540: CVE: bump mongo-go-driver for fix
Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON.
1 parent e1728c8 commit a305e50

File tree

24 files changed

+159
-592
lines changed

24 files changed

+159
-592
lines changed

go.mod

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,6 @@ require (
146146
github.com/go-openapi/validate v0.22.0 // indirect
147147
github.com/go-playground/locales v0.14.0 // indirect
148148
github.com/go-playground/universal-translator v0.18.0 // indirect
149-
github.com/go-stack/stack v1.8.1 // indirect
150149
github.com/gobuffalo/flect v0.2.5 // indirect
151150
github.com/gogo/protobuf v1.3.2 // indirect
152151
github.com/golang-jwt/jwt/v4 v4.4.2 // indirect
@@ -204,7 +203,7 @@ require (
204203
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace // indirect
205204
github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
206205
github.com/zclconf/go-cty v1.11.0 // indirect
207-
go.mongodb.org/mongo-driver v1.8.3 // indirect
206+
go.mongodb.org/mongo-driver v1.10.0 // indirect
208207
go.opencensus.io v0.24.0 // indirect
209208
go.opentelemetry.io/otel v1.11.1 // indirect
210209
go.opentelemetry.io/otel/trace v1.11.1 // indirect
@@ -287,3 +286,6 @@ replace golang.org/x/net => golang.org/x/net v0.5.0
287286

288287
// https://issues.redhat.com/browse/OCPBUGS-8119
289288
replace github.com/containerd/containerd => github.com/containerd/containerd v1.5.18
289+
290+
// https://issues.redhat.com/browse/OCPBUGS-8540
291+
replace go.mongodb.org/mongo-driver => go.mongodb.org/mongo-driver v1.10.0

go.sum

Lines changed: 4 additions & 61 deletions
Large diffs are not rendered by default.

vendor/github.com/go-stack/stack/LICENSE.md

Lines changed: 0 additions & 21 deletions
This file was deleted.

vendor/github.com/go-stack/stack/README.md

Lines changed: 0 additions & 38 deletions
This file was deleted.

0 commit comments

Comments
 (0)