From 37922d5333d7e598dba79928c38e8b5b88d7d1fb Mon Sep 17 00:00:00 2001 From: Liu Shilong Date: Tue, 7 Feb 2023 11:32:26 +0800 Subject: [PATCH] [submodule] Update submodule HEAD for sonic-mgmt-framework and sonic-telemetry (#13112) Why I did it golang lib xmlquery v1.2.1 has critical security issue. MS Component Governance created an alert. Update submodule HEAD to fix CG alert about CVE-2020-25614 How I did it sonic-mgmt-framework a72d9ee Fix CG alert CVE-2020-25614 about xmlquery v1.2.1 (#91) sonic-telemetrey 727aefd Fix CG alert CVE-2020-25614 about xmlquery v1.2.1 (#107) --- .gitmodules | 2 +- src/sonic-mgmt-framework | 2 +- src/sonic-telemetry | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.gitmodules b/.gitmodules index 0812b366c61b..1ae57b61ee1a 100644 --- a/.gitmodules +++ b/.gitmodules @@ -80,7 +80,7 @@ url = https://github.com/sonic-net/sonic-mgmt-framework [submodule "src/sonic-telemetry"] path = src/sonic-telemetry - url = https://github.com/sonic-net/sonic-telemetry + url = https://github.com/sonic-net/sonic-gnmi [submodule "Switch-SDK-drivers"] path = platform/mellanox/sdk-src/sx-kernel/Switch-SDK-drivers url = https://github.com/Mellanox/Switch-SDK-drivers diff --git a/src/sonic-mgmt-framework b/src/sonic-mgmt-framework index 3c3384cec8d1..a72d9ee8450b 160000 --- a/src/sonic-mgmt-framework +++ b/src/sonic-mgmt-framework @@ -1 +1 @@ -Subproject commit 3c3384cec8d15e493e6889bff6361a5a280a8811 +Subproject commit a72d9ee8450b656d980ce039c9e91ddc5b1e6a76 diff --git a/src/sonic-telemetry b/src/sonic-telemetry index e56e9b44e4a7..727aefd3de0f 160000 --- a/src/sonic-telemetry +++ b/src/sonic-telemetry @@ -1 +1 @@ -Subproject commit e56e9b44e4a7e3b211f070c298041951c543885b +Subproject commit 727aefd3de0fb04feb020e10cbfd6788d0b93bf1