Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update securejoin to fix GHSA-6xv5-86q9-7xr8 #2866

Merged
merged 5 commits into from
Nov 2, 2023

Conversation

dfarrell07
Copy link
Member

@dfarrell07 dfarrell07 commented Oct 31, 2023

Update generated by go get -u github.com/cyphar/filepath-securejoin/go mod tidy.

This is flagged by the Vulnerability Scanning GHA on the release-0.15 branch for filepath-securejoin v0.2.3 and was fixed in v0.2.4.

@submariner-bot
Copy link
Contributor

🤖 Created branch: z_pr2866/dfarrell07/http_cve
🚀 Full E2E won't run until the "ready-to-test" label is applied. I will add it automatically once the PR has 2 approvals, or you can add it manually.

Update generated by `go get -u
github.com/cyphar/filepath-securejoin`/`go mod tidy`.

This is flagged by the Vulnerability Scanning GHA on the release-0.15
branch for filepath-securejoin v0.2.3 and was fixed in v0.2.4.

Signed-off-by: Daniel Farrell <[email protected]>
Update generated by `go get -u github.com/docker/distribution`/`go mod
tidy`.

This is flagged by the Vulnerability Scanning GHA on the release-0.15
branch for docker/distribution v2.8.1 and was fixed in 2.8.2-beta.1.

Signed-off-by: Daniel Farrell <[email protected]>
@tpantelis tpantelis enabled auto-merge (rebase) November 1, 2023 12:01
@submariner-bot submariner-bot added the ready-to-test When a PR is ready for full E2E testing label Nov 2, 2023
@tpantelis tpantelis merged commit bb54a03 into submariner-io:release-0.15 Nov 2, 2023
34 of 37 checks passed
@submariner-bot
Copy link
Contributor

🤖 Closed branches: [z_pr2866/dfarrell07/http_cve]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ready-to-test When a PR is ready for full E2E testing security
Projects
No open projects
Status: Done
Development

Successfully merging this pull request may close these issues.

4 participants