Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[chore] Bump grpc-go to fix CVE-2023-44487 #27664

Merged
merged 6 commits into from
Oct 13, 2023
Merged

[chore] Bump grpc-go to fix CVE-2023-44487 #27664

merged 6 commits into from
Oct 13, 2023

Conversation

pavolloffay
Copy link
Member

@pavolloffay
Bump grpc-go that fixes Fix CVE-2023-44487
0eba21c 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
@pavolloffay
Fix
116b8d5 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
@pavolloffay
Bump grpc-go to fix CVE-2023-44487
0515767 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
@pavolloffay pavolloffay requested review from a team October 13, 2023 13:04
@github-actions github-actions bot added cmd/configschema configschema command cmd/mdatagen mdatagen command cmd/otelcontribcol otelcontribcol command cmd/oteltestbedcol cmd/telemetrygen telemetrygen command labels Oct 13, 2023
@pavolloffay
Fix
8eebdae 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
@pavolloffay
Fix
7e712e0 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
codeboten
codeboten approved these changes Oct 13, 2023
View reviewed changes
Copy link
Contributor

@codeboten codeboten left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the changelog, i'll add the skip changelog label. normally we prefix version updates w/ [chore] in the PR name to apply the label automatically

@codeboten codeboten added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Oct 13, 2023
@pavolloffay
Fix
ad89dd5 
Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
@pavolloffay pavolloffay changed the title Bump grpc-go to fix CVE-2023-44487 [chore] Bump grpc-go to fix CVE-2023-44487 Oct 13, 2023
@pavolloffay
Copy link
Member Author

Please remove the changelog,

done

@codeboten
Copy link
Contributor

Thanks @pavolloffay!

@codeboten codeboten added the ready to merge Code review completed; ready to merge by maintainers label Oct 13, 2023
@djaglowski djaglowski merged commit 09bbc48 into open-telemetry:main Oct 13, 2023
81 checks passed
@github-actions github-actions bot added this to the next release milestone Oct 13, 2023
JaredTan95 pushed a commit to openinsight-proj/opentelemetry-collector-contrib that referenced this pull request Oct 18, 2023
@pavolloffay @JaredTan95
[chore] Bump grpc-go to fix CVE-2023-44487 (open-telemetry#27664)
3d04480 
GHSA-qppj-fm5r-hxr3

https://github.com/grpc/grpc-go/releases/tag/v1.58.3

---------

Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
jmsnll pushed a commit to jmsnll/opentelemetry-collector-contrib that referenced this pull request Nov 12, 2023
@pavolloffay @jmsnll
[chore] Bump grpc-go to fix CVE-2023-44487 (open-telemetry#27664)
5f5cd83 
GHSA-qppj-fm5r-hxr3

https://github.com/grpc/grpc-go/releases/tag/v1.58.3

---------

Signed-off-by: Pavol Loffay <p.loffay@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@songy23 songy23 songy23 approved these changes

@djaglowski djaglowski djaglowski approved these changes

@dashpole dashpole dashpole approved these changes

@codeboten codeboten codeboten approved these changes

@MovieStoreGuy MovieStoreGuy Awaiting requested review from MovieStoreGuy MovieStoreGuy is a code owner

@andrzej-stencel andrzej-stencel Awaiting requested review from andrzej-stencel andrzej-stencel is a code owner

@atoulme atoulme Awaiting requested review from atoulme atoulme is a code owner

@jmacd jmacd Awaiting requested review from jmacd jmacd is a code owner

@dmitryax dmitryax Awaiting requested review from dmitryax dmitryax is a code owner

@fatsheep9146 fatsheep9146 Awaiting requested review from fatsheep9146 fatsheep9146 is a code owner

@jpkrohling jpkrohling Awaiting requested review from jpkrohling jpkrohling is a code owner

@Aneurysm9 Aneurysm9 Awaiting requested review from Aneurysm9

@TylerHelmuth TylerHelmuth Awaiting requested review from TylerHelmuth TylerHelmuth is a code owner

@mx-psi mx-psi Awaiting requested review from mx-psi mx-psi is a code owner

@bogdandrutu bogdandrutu Awaiting requested review from bogdandrutu bogdandrutu is a code owner

@evan-bradley evan-bradley Awaiting requested review from evan-bradley evan-bradley is a code owner

@jsuereth jsuereth Awaiting requested review from jsuereth jsuereth is a code owner

@arminru arminru Awaiting requested review from arminru

@bryan-aguilar bryan-aguilar Awaiting requested review from bryan-aguilar

Assignees

@bogdandrutu bogdandrutu

Labels
cmd/configschema configschema command cmd/mdatagen mdatagen command cmd/otelcontribcol otelcontribcol command cmd/oteltestbedcol cmd/telemetrygen telemetrygen command connector/count connector/datadog connector/exceptions connector/routing connector/servicegraph connector/spanmetrics examples/demo exporter/alibabacloudlogservice Alibaba components exporter/awscloudwatchlogs awscloudwatchlogs exporter exporter/awsemf awsemf exporter exporter/awskinesis exporter/awss3 exporter/awsxray exporter/azuredataexplorer exporter/azuremonitor exporter/carbon exporter/cassandra exporter/clickhouse exporter/coralogix exporter/datadog Datadog components exporter/dataset exporter/dynatrace exporter/elasticsearch exporter/f5cloud F5 exporter exporter/file exporter/googlecloud exporter/googlecloudpubsub exporter/googlemanagedprometheus Google Managed Prometheus exporter exporter/honeycombmarker exporter/influxdb exporter/instana exporter/kafka exporter/kinetica exporter/loadbalancing exporter/logicmonitor exporter/logzio exporter/loki Loki Exporter exporter/mezmo exporter/opencensus exporter/opensearch exporter/prometheus exporter/prometheusremotewrite exporter/pulsar exporter/sapm ready to merge Code review completed; ready to merge by maintainers Skip Changelog PRs that do not require a CHANGELOG.md entry
Projects
None yet
Milestone
v0.88.0
Development

Successfully merging this pull request may close these issues.
6 participants
@pavolloffay @codeboten @dashpole @djaglowski @songy23 @bogdandrutu