[YUNIKORN-1449] Fix CVE issues detected in golang.org/x/ modules

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Component/s: core - common, scheduler-interface, shim - kubernetes
• Labels: pull-request-available
• Target Version: 1.2.0
• Assignee: Peter Bacsko
• Reporter: Peter Bacsko
• Created: 06/Dec/22 10:38
• Updated: 07/Feb/23 22:33
• Resolved: 06/Dec/22 15:40

Description

We identified some CVEs internally with AquaSec.

Fixing needs locking some golang.org/x/ module version with the "replace" directive in go.mod.

Issue Links

• is related to: YUNIKORN-1450 Update golang.org/x/net for CVE-2022-41717
• links to: GitHub Pull Request #80
• links to: GitHub Pull Request #468
• links to: GitHub Pull Request #498