Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Manual backport of [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 into release/1.0.x #2650

Conversation

zalimeni
Copy link
Member

@zalimeni zalimeni commented Jul 25, 2023

Manual backport (different Go version) of #2642, replaces #2643

Upgrade to Go 1.19.11 and net/http 1.12.0 to resolve CVE-2023-29406.

How I've tested this PR: tests continue to pass

How I expect reviewers to test this PR: 👀

Checklist:

Upgrade to Go 1.19.11 and `net/http` 1.12.0 to resolve CVE-2023-29406.
@zalimeni zalimeni changed the title security: Upgrade Go and net/http [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 Jul 25, 2023
@zalimeni zalimeni added the pr/no-backport signals that a PR will not contain a backport label label Jul 25, 2023
@zalimeni zalimeni changed the title [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 Manual backport of [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 Jul 25, 2023
@zalimeni zalimeni changed the title Manual backport of [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 Manual backport of [NET-4865] security: Upgrade Go and net/http CVE-2023-29406 into release/1.0.x Jul 25, 2023
@zalimeni zalimeni marked this pull request as ready for review July 25, 2023 14:51
@zalimeni zalimeni requested a review from curtbushko July 25, 2023 14:51
Copy link
Contributor

@curtbushko curtbushko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@zalimeni zalimeni merged commit 4b04283 into release/1.0.x Jul 25, 2023
6 of 7 checks passed
@zalimeni zalimeni deleted the backport/zalimeni/net-4865-bump-go-net_http-cve/manual-1.0.x branch July 25, 2023 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr/no-backport signals that a PR will not contain a backport label
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants