-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump protobuf to remediate CVE-2024-7254 #3731
Conversation
Bump protobuf to remediate CVE-2024-7254
Welcome @alta404! |
/lgtm do we want to backport it to the recent releases as well? |
@yue9944882 this is the backport to release 21. We could also backport to 20 if we wanted to, but no one has asked for it. /lgtm |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: alta404, brendandburns The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
@alta404 this has been released as https://mvnrepository.com/artifact/io.kubernetes/client-java/21.0.2 |
Bump protobuf to 4.27.5 to remediate CVE-2024-7254