You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "aalimlakhani (via GitHub)" <gi...@apache.org> on 2025/04/24 21:00:38 UTC

[I] bug: Need to update Go packages to address CVE GO-2024-2887 [apisix-ingress-controller]

aalimlakhani opened a new issue, #2389:
URL: https://github.com/apache/apisix-ingress-controller/issues/2389

   ### Current Behavior
   
   This CVE is flagged due to Go package net/netip dependency: https://pkg.go.dev/vuln/GO-2024-2887
   Go binaries need to be updated.
   
   ### Expected Behavior
   
   _No response_
   
   ### Error Logs
   
   _No response_
   
   ### Steps to Reproduce
   
   Run a security scan on apisix-ingress-controller
   
   ### Environment
   
   v1.8.4
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] bug: Need to update Go packages to address CVE GO-2024-2887 [apisix-ingress-controller]

Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #2389:
URL: https://github.com/apache/apisix-ingress-controller/issues/2389#issuecomment-3166673950

   The latest version uses Go 1.23.0, and this vulnerability has been fixed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] bug: Need to update Go packages to address CVE GO-2024-2887 [apisix-ingress-controller]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #2389:
URL: https://github.com/apache/apisix-ingress-controller/issues/2389#issuecomment-3111650569

   This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] bug: Need to update Go packages to address CVE GO-2024-2887 [apisix-ingress-controller]

Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop closed issue #2389: bug: Need to update Go packages to address CVE GO-2024-2887
URL: https://github.com/apache/apisix-ingress-controller/issues/2389


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org