You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@yunikorn.apache.org by "weichen lai (Jira)" <ji...@apache.org> on 2026/08/30 08:20:00 UTC
[jira] [Comment Edited] (YUNIKORN-3435) upgrade go dependencies for CVEs
[ https://issues.apache.org/jira/browse/YUNIKORN-3435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18109611#comment-18109611 ]
weichen lai edited comment on YUNIKORN-3435 at 8/30/26 8:19 AM:
----------------------------------------------------------------
I have removed the replace blocks and upgraded net, text, and crypto to their latest available versions across the repos. Since Google's security fix for x/crypto is scheduled for release on Sept 2, I will submit a follow-up update to bump crypto once the official tag is released.
[https://groups.google.com/g/golang-announce/c/Cud--RBlVbE]
was (Author: JIRAUSER313858):
I have removed the replace blocks and upgraded `net`, `text`, and `crypto` to their latest available versions across the repos. Since Google's security fix for `x/crypto` is scheduled for release on Sept 2, I will submit a follow-up update to bump `crypto` once the official tag is released.
[https://groups.google.com/g/golang-announce/c/Cud--RBlVbE|https://groups.google.com/g/golang-announce/c/Cud--RBlVbE]
> upgrade go dependencies for CVEs
> --------------------------------
>
> Key: YUNIKORN-3435
> URL: https://issues.apache.org/jira/browse/YUNIKORN-3435
> Project: Apache YuniKorn
> Issue Type: Improvement
> Components: core - scheduler, shim - kubernetes, webapp
> Reporter: Wilfred Spiegelenburg
> Assignee: weichen lai
> Priority: Major
> Labels: newbie, pull-request-available
>
> Two high CVEs in these dependencies
> * golang.org/x/text
> * golang.org/x/net
> -Should also consider moving to the latest K8s 1.36.4 version- this is already handled in YUNIKORN-3300
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org