Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump k8s.io/kubernetes and google.golang.org/grpc to fix vulnerabilities #608

Closed
wants to merge 2 commits into from
Closed

Bump k8s.io/kubernetes and google.golang.org/grpc to fix vulnerabilities #608

wants to merge 2 commits into from

Conversation

DamianSawicki
Copy link
Collaborator

@DamianSawicki DamianSawicki commented Oct 30, 2023 •
edited
Loading

Bumping k8s.io/kubernetes to v1.24.15. Reasons:

Bumping google.golang.org/grpc from v1.49.0 to v1.56.3. Reason:

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Oct 30, 2023
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: DamianSawicki
Once this PR has been reviewed and has the lgtm label, please assign mrhohn for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Oct 30, 2023
@DamianSawicki
Bump k8s.io/kubernetes to fix vulnerabilities
df8fddc 
CVE-2023-2431 was fixed in 1.24.14.
CVE-2023-2728 was fixed in 1.24.15.
CVE-2023-2727 was fixed in 1.24.15.
@kl52752
Copy link
Collaborator

kl52752 commented Oct 30, 2023

/ok-to-test

@k8s-ci-robot k8s-ci-robot added the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Oct 30, 2023
@DamianSawicki
Bump google.golang.org/grpc to fix vulnerability
510a93d 
Bumping google.golang.org/grpc from v1.49.0 to v1.56.3
to fix GHSA-m425-mq94-257g.
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Oct 30, 2023
@DamianSawicki DamianSawicki changed the title Bump k8s.io/kubernetes to fix vulnerabilities Bump k8s.io/kubernetes and google.golang.org/grpc to fix vulnerabilities Oct 30, 2023
@DamianSawicki DamianSawicki marked this pull request as draft October 31, 2023 11:22
@k8s-ci-robot k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Oct 31, 2023
@DamianSawicki
Copy link
Collaborator Author

Merged a PR with more changes (#607), closing this one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kl52752 kl52752 Awaiting requested review from kl52752

@MrHohn MrHohn Awaiting requested review from MrHohn

Assignees
No one assigned
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@DamianSawicki @k8s-ci-robot @kl52752