Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump golang net dependency for CVE 2023 44487 #38

Conversation

eugene-chang-fs
Copy link
Collaborator

No description provided.

Copy link
Contributor

@ScottLNorvell ScottLNorvell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable enough. Should definitely test to make sure it still works.

Copy link
Collaborator

@jurassix jurassix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@eugene-chang-fs @ScottLNorvell

Tested both the following scenarios with the changes here:

  • ✅ requests are relayed using local relay (e.g. ./dist/relay)
  • ✅ requests are relayed using local docker image

@eugene-chang-fs eugene-chang-fs merged commit 157b3ca into eugenechang/update-ip-regex Feb 7, 2024
5 checks passed
@eugene-chang-fs eugene-chang-fs deleted the eugenechang/bump-golang-net-dependency-for-CVE-2023-44487 branch February 7, 2024 15:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants