[ 
https://issues.apache.org/jira/browse/YUNIKORN-1912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Wilfred Spiegelenburg resolved YUNIKORN-1912.
---------------------------------------------
    Fix Version/s: 1.4.0
       Resolution: Fixed

Resolving, further updates for new CVEs will be handled in new jiras

> Upgrade golang dependencies for CVEs
> ------------------------------------
>
>                 Key: YUNIKORN-1912
>                 URL: https://issues.apache.org/jira/browse/YUNIKORN-1912
>             Project: Apache YuniKorn
>          Issue Type: Task
>          Components: CVE
>            Reporter: Wilfred Spiegelenburg
>            Assignee: Junyao Huang
>            Priority: Major
>              Labels: newbie, pull-request-available
>             Fix For: 1.4.0
>
>
> golang.org/x/net: need to move to at least 0.13 due to CVEs
> Should push all replace ones we use to latest:
>     golang.org/x/crypto =>  v0.12.0
>     golang.org/x/net =>  v0.14.0
>     golang.org/x/sys =>  v0.11.0
>     golang.org/x/text => v0.12.0
>     golang.org/x/tools => v0.12.0
> This needs to be checked against all repos



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to