You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@yunikorn.apache.org by "Wilfred Spiegelenburg (Jira)" <ji...@apache.org> on 2023/08/10 06:50:00 UTC

[jira] [Created] (YUNIKORN-1912) Upgrade golang dependencies for CVEs

Wilfred Spiegelenburg created YUNIKORN-1912:
-----------------------------------------------

             Summary: Upgrade golang dependencies for CVEs
                 Key: YUNIKORN-1912
                 URL: https://issues.apache.org/jira/browse/YUNIKORN-1912
             Project: Apache YuniKorn
          Issue Type: Task
          Components: CVE
            Reporter: Wilfred Spiegelenburg
            Assignee: Wilfred Spiegelenburg


golang.org/x/net: need to move to at least 0.13 due to CVEs

Should push all replace ones we use to latest:

    golang.org/x/crypto =>  v0.12.0
    golang.org/x/net =>  v0.14.0
    golang.org/x/sys =>  v0.11.0
    golang.org/x/text => v0.12.0
    golang.org/x/tools => v0.12.0

This needs to be checked against all repos



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org