-
Notifications
You must be signed in to change notification settings - Fork 299
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
security: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #1467
security: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #1467
Conversation
Skipping CI for Draft Pull Request. |
38af96c
to
d308d13
Compare
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1467 +/- ##
==========================================
+ Coverage 36.47% 36.51% +0.04%
==========================================
Files 63 63
Lines 4532 4532
==========================================
+ Hits 1653 1655 +2
+ Misses 2734 2732 -2
Partials 145 145 ☔ View full report in Codecov by Sentry. |
/retitle security: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: aramase, dobsonj The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
…upstream-release-1.4 Automated cherry pick of #1467: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0
What this PR does / why we need it:
Bump google.golang.org/[email protected] and github.com/golang/[email protected] to address CVE-2024-24786.
https://pkg.go.dev/vuln/GO-2024-2611
GHSA-8r3f-844c-mc37
Which issue(s) this PR fixes:
/kind bug
Special notes for your reviewer:
Does this PR introduce a user-facing change?: