You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@yunikorn.apache.org by "Wilfred Spiegelenburg (Jira)" <ji...@apache.org> on 2024/12/19 03:27:00 UTC

[jira] [Created] (YUNIKORN-3002) Update Go dependencies for CVE fixes

Wilfred Spiegelenburg created YUNIKORN-3002:
-----------------------------------------------

             Summary: Update Go dependencies for CVE fixes
                 Key: YUNIKORN-3002
                 URL: https://issues.apache.org/jira/browse/YUNIKORN-3002
             Project: Apache YuniKorn
          Issue Type: Task
          Components: core - scheduler, shim - kubernetes
            Reporter: Wilfred Spiegelenburg


Apply changes for new CVE:
 * CVE-2024-45337: CRITICAL, not affected as we do not use SSH, just upgrade crypto to satisfy scanner, golang.org/x/crypto@v0.31.0
 * CVE-2024-45338: HIGH, not affected as we do not use html parsing, just upgrade to satisfy the scanner golang.org/x/net#v0.33.0
h3.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: dev-help@yunikorn.apache.org