[ https://issues.apache.org/jira/browse/YUNIKORN-3002 ]
Wilfred Spiegelenburg deleted comment on YUNIKORN-3002:
-------------------------------------------------
was (Author: wifreds):
CVE changes with a tidy pulls in multiple other golang.org/x changes.
Upgrade K8s dependency for CAM to 1.31 at the same time to move to a K8s
version that was build and tested with the same Go version as the rest of the
code.
> Update Go dependencies for CVE fixes
> ------------------------------------
>
> Key: YUNIKORN-3002
> URL: https://issues.apache.org/jira/browse/YUNIKORN-3002
> Project: Apache YuniKorn
> Issue Type: Task
> Components: core - scheduler, shim - kubernetes
> Reporter: Wilfred Spiegelenburg
> Priority: Critical
>
> Apply changes for new CVE:
> * CVE-2024-45337: CRITICAL, not affected as we do not use SSH, just upgrade
> crypto to satisfy scanner, golang.org/x/[email protected]
> * CVE-2024-45338: HIGH, not affected as we do not use html parsing, just
> upgrade to satisfy the scanner golang.org/x/net#v0.33.0
> h3.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
