Skip to content

Conversation

smerkviladze
Copy link
Contributor

@smerkviladze smerkviladze commented Mar 13, 2025

Fixes CVE-2024-45337, CVE-2025-22869, CVE-2024-45338, CVE-2025-22868, CVE-2025-22870

Proposed Changes

  • Bump golang.org/x/crypto to v0.36.0
  • Bump golang.org/x/net to v0.37.0
  • Bump golang.org/x/oauth2 to v0.28.0

@smerkviladze smerkviladze changed the title [MKE-12184] Bump /x/crypto to v0.36.0, x/net to v0.37.0 and x/oauth2 to v0.28.0 Bump /x/crypto to v0.36.0, x/net to v0.37.0 and x/oauth2 to v0.28.0 Mar 15, 2025
@smerkviladze smerkviladze deleted the bump/net/crypto/oauth2 branch March 18, 2025 16:54
@smerkviladze smerkviladze restored the bump/net/crypto/oauth2 branch March 27, 2025 10:01
@smerkviladze smerkviladze reopened this Mar 27, 2025
@smerkviladze smerkviladze force-pushed the bump/net/crypto/oauth2 branch from a2a45a7 to 99d16e4 Compare March 27, 2025 10:14
@smerkviladze smerkviladze marked this pull request as ready for review March 27, 2025 10:32
Copy link
Contributor

@xinfengliu xinfengliu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks!

@smerkviladze smerkviladze merged commit 7e7a151 into Mirantis:master Mar 27, 2025
11 checks passed
@smerkviladze smerkviladze deleted the bump/net/crypto/oauth2 branch March 27, 2025 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants