Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update OPCUA to 0.11.0 to fix CVEs #528

Merged
merged 3 commits into from
Oct 17, 2022

Conversation

adithyaj
Copy link
Collaborator

@adithyaj adithyaj commented Oct 17, 2022

Update opcua to 0.11.0 to fix out of bounds write + uncontrolled resource consumption

Signed-off-by: Adithya J [email protected]

What this PR does / why we need it:
opcua v0.10 and below are vulnerable to CVE-2022-25903 and CVE-2022-25888. This updates the opcua dependency to 0.11.0 to include the security patches.
Special notes for your reviewer:

If applicable:

  • added code adheres to standard Rust formatting (cargo fmt)
  • code builds properly (cargo build)
  • code is free of common mistakes (cargo clippy)
  • all Akri tests succeed (cargo test)
  • all commits pass the DCO bot check by being signed off -- see the failing DCO check for instructions on how to retroactively sign commits

@adithyaj adithyaj changed the title Update OPCUA to 0.11.0 to fix vuln Update OPCUA to 0.11.0 to fix CVEs Oct 17, 2022
@adithyaj adithyaj mentioned this pull request Oct 17, 2022
8 tasks
@adithyaj adithyaj marked this pull request as ready for review October 17, 2022 06:40
@adithyaj adithyaj merged commit 86b199d into project-akri:main Oct 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants