Skip to content

versions: Bump idna crate to >= 1.0.3 #11521

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Jul 14, 2025
Merged

versions: Bump idna crate to >= 1.0.3 #11521

merged 2 commits into from
Jul 14, 2025

Conversation

stevenhorsman
Copy link
Member

Bump url, reqwests and idna crates in order to move away from idna <1.0.3 and remediate CVE-2024-12224.

@stevenhorsman stevenhorsman changed the title versions: Bump idna crate to >= 1.0.4 versions: Bump idna crate to >= 1.0.3 Jul 4, 2025
@stevenhorsman stevenhorsman added the security Potential or actual security issue label Jul 7, 2025
@stevenhorsman
versions: Bump idna crate to >= 1.0.4
b7bf46f 
Bump url, reqwests and idna crates in order to move away from
idna <1.0.3 and remediate CVE-2024-12224.

Signed-off-by: stevenhorsman <steven@uk.ibm.com>
@stevenhorsman
kata-ctl: Update expected test failure message
f96b8fb 
Update expected error after url crate bump

Signed-off-by: stevenhorsman <steven@uk.ibm.com>
fidencio
fidencio approved these changes Jul 14, 2025
View reviewed changes
Copy link
Member

@fidencio fidencio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks @stevenhorsman!

@fidencio fidencio merged commit 579d373 into kata-containers:main Jul 14, 2025
502 of 527 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@fidencio fidencio fidencio approved these changes

@danmihai1 danmihai1 danmihai1 approved these changes

Assignees
No one assigned
Labels
ok-to-test security Potential or actual security issue
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@stevenhorsman @fidencio @danmihai1