Skip to content

Bug 1889954: bump(*) to mitigate CVE-2020-8564 #195

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
openshift-merge-robot merged 1 commit into from
Jan 22, 2021
Merged

Bug 1889954: bump(*) to mitigate CVE-2020-8564 #195

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ require (
github.com/moby/buildkit v0.6.2 // indirect
github.com/opencontainers/runc v1.0.0-rc9
github.com/opencontainers/runtime-spec v1.0.0
github.com/openshift/api v3.9.1-0.20191024142031-e89ff1fddcbe+incompatible
github.com/openshift/api v0.0.0-20200618202633-7192180f496a
Copy link
Contributor

@adambkaplan adambkaplan Dec 8, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where did this api bump come from? This appears to be from a later OpenShift release.

Copy link
Author

@coreydaley coreydaley Dec 15, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That is the latest commit in the release-4.4 branch of the openshift/api repository: openshift/api@7192180

Copy link
Contributor

@adambkaplan adambkaplan Dec 16, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please indicate in the commit message that you are bumping openshift/api, and the reason for doing so. I assume you did this to get around an "invalid pseudo-version" error? I found something similar in a separate item I was iterating on.

github.com/openshift/client-go v0.0.0-20191022152013-2823239d2298
github.com/openshift/imagebuilder v1.1.1
github.com/openshift/library-go v0.0.0-20190904120025-7d4acc018c61
Expand All @@ -54,8 +54,8 @@ require (
go.uber.org/zap v1.11.0 // indirect
golang.org/x/sys v0.0.0-20191127021746-63cb32ae39b2
golang.org/x/time v0.0.0-20190921001708-c4c64cad1fd0 // indirect
k8s.io/api v0.17.0
k8s.io/apimachinery v0.17.0
k8s.io/api v0.17.13
k8s.io/apimachinery v0.17.13
k8s.io/client-go v0.0.0
k8s.io/component-base v0.0.0
k8s.io/klog v1.0.0
Expand Down
139 changes: 8 additions & 131 deletions go.sum
View file
Open in desktop

Large diffs are not rendered by default.

Loading