Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: bump google.golang.org/grpc to 1.59.0 #551

Merged
merged 1 commit into from
Nov 1, 2023

Conversation

adamqqqplay
Copy link
Contributor

  1. Fix gRPC-Go HTTP/2 Rapid Reset vulnerability

Please refer to:
GHSA-m425-mq94-257g

go.mod Outdated
@@ -49,14 +49,15 @@ require (
k8s.io/cri-api v0.27.0-alpha.3
)

require github.com/freddierice/go-losetup v0.0.0-20220711213114-2a14873012db // indirect
require github.com/freddierice/go-losetup v0.0.0-20220711213114-2a14873012db
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we merge this into the above require?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed. And also moved some direct mods to the area above.

1. Fix gRPC-Go HTTP/2 Rapid Reset vulnerability

Please refer to:
GHSA-m425-mq94-257g

Signed-off-by: Qinqi Qu <quqinqi@linux.alibaba.com>
Copy link

codecov bot commented Nov 1, 2023

Codecov Report

Merging #551 (bcc9295) into main (2f20ea7) will increase coverage by 0.05%.
Report is 11 commits behind head on main.
The diff coverage is n/a.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #551      +/-   ##
==========================================
+ Coverage   33.56%   33.61%   +0.05%     
==========================================
  Files          65       65              
  Lines        8176     8259      +83     
==========================================
+ Hits         2744     2776      +32     
- Misses       5117     5167      +50     
- Partials      315      316       +1     

see 6 files with indirect coverage changes

Copy link
Collaborator

@imeoer imeoer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, LGTM.

@imeoer imeoer merged commit 985c185 into containerd:main Nov 1, 2023
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants