Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix NET-704 CVEs (backport to 1.1.x) #2226

Merged
merged 2 commits into from
May 31, 2023
Merged

Fix NET-704 CVEs (backport to 1.1.x) #2226

merged 2 commits into from
May 31, 2023

Conversation

t-eckert
Copy link
Contributor

@t-eckert t-eckert commented May 31, 2023 •
edited
Loading

Manual backport of #2197

Changes proposed in this PR:

  • Fixes the CVEs noted in NET-704

How I've tested this PR:

How I expect reviewers to test this PR:

Checklist:

  • Tests added
  • CHANGELOG entry added

    HashiCorp engineers only, community PRs should not add a changelog entry.
    Entries should use present tense (e.g. Add support for...)

@t-eckert t-eckert added the pr/no-backport signals that a PR will not contain a backport label label May 31, 2023
@t-eckert t-eckert marked this pull request as ready for review May 31, 2023 18:59
@t-eckert t-eckert requested review from curtbushko and david-yu May 31, 2023 18:59
@david-yu
Copy link
Contributor

Thank you, I appreciate you doing this this helps us sustain both 1.0.x and 1.1.x for their lifecycle.

@t-eckert t-eckert merged commit 189002a into release/1.1.x May 31, 2023
@t-eckert t-eckert deleted the fix-cves-in-backport-1.1.x branch May 31, 2023 21:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@andrewstucki andrewstucki andrewstucki approved these changes

@curtbushko curtbushko Awaiting requested review from curtbushko

@david-yu david-yu Awaiting requested review from david-yu

Assignees
No one assigned
Labels
pr/no-backport signals that a PR will not contain a backport label
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@t-eckert @david-yu @andrewstucki