Skip to content

bump golang.org/x/crypto to v0.21.0#33

Merged
ArangoGutierrez merged 1 commit intomainfrom
upd-crypto
Mar 26, 2024
Merged

bump golang.org/x/crypto to v0.21.0#33
ArangoGutierrez merged 1 commit intomainfrom
upd-crypto

Conversation

@tariq1890
Copy link
Contributor

This is an important CVE update as the issue for this library is SSH-related and we use this library for the SSH'ing into the instance

https://devhub.checkmarx.com/cve-details/CVE-2023-42818/

Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
@ArangoGutierrez ArangoGutierrez merged commit b39e83d into main Mar 26, 2024
@ArangoGutierrez ArangoGutierrez deleted the upd-crypto branch March 26, 2024 16:34
ArangoGutierrez added a commit to ArangoGutierrez/holodeck that referenced this pull request Feb 12, 2026
…host

These fields are interpolated into shell scripts but were not covered
by ValidateTemplateInputs(). Add featureGatePattern for K8sFeatureGates,
reuse gitRefPattern for Latest.Track branches (K8s + CTK), and add
hostnamePattern for K8sEndpointHost.

Audit findings NVIDIA#16 (MEDIUM), NVIDIA#32 (LOW), NVIDIA#33 (LOW).

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
ArangoGutierrez added a commit that referenced this pull request Feb 13, 2026
…host (#647)

These fields are interpolated into shell scripts but were not covered
by ValidateTemplateInputs(). Add featureGatePattern for K8sFeatureGates,
reuse gitRefPattern for Latest.Track branches (K8s + CTK), and add
hostnamePattern for K8sEndpointHost.

Audit findings #16 (MEDIUM), #32 (LOW), #33 (LOW).

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants