Skip to content

Backport of Bump the golang.org/x/net to 0.7.0 to address CVE-2022-41723 into release/1.14.x#17026

Merged
nathancoleman merged 2 commits intorelease/1.14.xfrom
backport/updategolangx/curiously-many-ibex
Apr 24, 2023
Merged

Backport of Bump the golang.org/x/net to 0.7.0 to address CVE-2022-41723 into release/1.14.x#17026
nathancoleman merged 2 commits intorelease/1.14.xfrom
backport/updategolangx/curiously-many-ibex

Conversation

@hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #16754 to be assessed for backporting due to the inclusion of the label backport/1.14.

WARNING automatic cherry-pick of commits failed. Commits will require human attention.

merge conflict error: POST https://api.github.com/repos/hashicorp/consul/merges: 409 Merge conflict []

The below text is copied from the body of the original PR.


Description

To address this security vulnerability issue which has a HIGH severity.
https://nvd.nist.gov/vuln/detail/CVE-2022-41723

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • not a security concern

Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/updategolangx/curiously-many-ibex branch 2 times, most recently from 61a6db9 to 8b28a7e Compare April 18, 2023 17:31
@hashicorp-cla
Copy link

hashicorp-cla commented Apr 18, 2023

CLA assistant check
All committers have signed the CLA.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@nathancoleman nathancoleman self-assigned this Apr 18, 2023
@nathancoleman nathancoleman force-pushed the backport/updategolangx/curiously-many-ibex branch from 4ce4235 to 50e878d Compare April 18, 2023 19:41
@david-yu david-yu marked this pull request as ready for review April 24, 2023 21:05
@david-yu
Copy link
Contributor

Does this also need to be merged as well?

@nathancoleman nathancoleman merged commit 5f5590e into release/1.14.x Apr 24, 2023
@nathancoleman nathancoleman deleted the backport/updategolangx/curiously-many-ibex branch April 24, 2023 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants