[YUNIKORN-1450] Update golang.org/x/net for CVE-2022-41717

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Component/s: CVE
• Labels: pull-request-available
• Target Version: 1.2.0
• Assignee: Peter Bacsko
• Reporter: Wilfred Spiegelenburg
• Created: 07/Dec/22 01:30
• Updated: 07/Feb/23 22:33
• Resolved: 08/Dec/22 06:23

Description

A new CVE fix just released, a couple of hours ago. We have just updated to v0.2.0 for x/net in YUNIKORN-1449. We should move to golang.org/x/net@v0.3.0 for CVE-2022-41717.

The other CVE fix released is a windows only issue so we do not have to worry about that one.

Issue Links

• relates to: YUNIKORN-1449 Fix CVE issues detected in golang.org/x/ modules
• relates to: YUNIKORN-1563 Update golang.org/x/net for CVE-2022-41717
• links to: GitHub Pull Request #81
• links to: GitHub Pull Request #469
• links to: GitHub Pull Request #500