[YUNIKORN-1563] Update golang.org/x/net for CVE-2022-41717

• Type: Task
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: CVE
• Labels: pull-request-available
• Target Version: 1.3.0
• Assignee: Krishna Birla
• Reporter: Wilfred Spiegelenburg
• Created: 07/Feb/23 06:24
• Updated: 20/Jun/23 14:41
• Resolved: 07/Feb/23 22:14

Description

We have updated to v0.3.0 for golang.org/x/net. We should have moved to at least golang.org/x/net@v0.4.0 for CVE-2022-41717.

It is the only mod CVE open for YuniKorn v1.2.0 which we can fix

 

Issue Links

• is related to: YUNIKORN-1450 Update golang.org/x/net for CVE-2022-41717
• links to: GitHub Pull Request #85
• links to: GitHub Pull Request #127
• links to: GitHub Pull Request #127
• links to: GitHub Pull Request #501
• links to: GitHub Pull Request #524