[
https://issues.apache.org/jira/browse/YUNIKORN-3002?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Craig Condit resolved YUNIKORN-3002.
------------------------------------
Fix Version/s: 1.7.0
1.6.1
Resolution: Fixed
Merged both PRs to master and cherry-picked to branch-1.6 in shim and core.
> Update Go dependencies for CVE fixes
> ------------------------------------
>
> Key: YUNIKORN-3002
> URL: https://issues.apache.org/jira/browse/YUNIKORN-3002
> Project: Apache YuniKorn
> Issue Type: Task
> Components: core - scheduler, shim - kubernetes
> Reporter: Wilfred Spiegelenburg
> Assignee: Tzu-Hua Lan
> Priority: Critical
> Labels: pull-request-available
> Fix For: 1.7.0, 1.6.1
>
>
> Apply changes for new CVE:
> * CVE-2024-45337: CRITICAL, not affected as we do not use SSH, just upgrade
> crypto to satisfy scanner, golang.org/x/[email protected]
> * CVE-2024-45338: HIGH, not affected as we do not use html parsing, just
> upgrade to satisfy the scanner golang.org/x/net#v0.33.0
> h3.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
