You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Upgrade bazel build to use the latest libcurl version v8.4.0 (to be released on Oct 11, 2023) for below two security vulnerabilities:
CVE-2023-38545, a high severity flaw that affects both the libcurl library and the curl tool, and CVE-2023-38546, a low severity bug that only affects libcurl.
Upgrade bazel build to use the latest libcurl version v8.4.0 (to be released on Oct 11, 2023) for below two security vulnerabilities:
CVE-2023-38545, a high severity flaw that affects both the libcurl library and the curl tool, and
CVE-2023-38546, a low severity bug that only affects libcurl.
Release announcement: curl/curl#12026
Changes required:
bazel: upgrade version here -
opentelemetry-cpp/bazel/repository.bzl
Line 151 in 18a27df
For CMake, we don't use sticky version for libcurl, and rely on package manager (apt-get, vcpkg) so hopefully no changes be required.
Thanks @ThomsonTan for bringing this up. Please add if I missed something.
The text was updated successfully, but these errors were encountered: