[release/2.0] Upgrade x/net to 0.33.0 to fix vulnerability GHSA-w32m-9786-jp63#11387
Conversation
|
Hi @frcai. Thanks for your PR. I'm waiting for a containerd member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
310782e to
b623e60
Compare
c956723 to
f3b6010
Compare
Signed-off-by: Chifeng Cai <frcai@microsoft.com>
f3b6010 to
d3437eb
Compare
Signed-off-by: Chifeng Cai <frcai@microsoft.com>
AkihiroSuda
left a comment
There was a problem hiding this comment.
LGTM, but it is unlikely that we are using the vulnerable HTML parser?
$ go mod why golang.org/x/net/html
# golang.org/x/net/html
github.com/containerd/containerd/v2/internal/cri/config
k8s.io/kubelet/pkg/cri/streaming
k8s.io/kubelet/pkg/cri/streaming/portforward
k8s.io/apimachinery/pkg/util/httpstream/spdy
k8s.io/apimachinery/pkg/util/proxy
golang.org/x/net/html|
@kzys This PR needs another approval with write access, thanks. |
No description provided.