Skip to content

[release/1.4] Update gogo/protobuf to v1.3.2#5018

Merged
estesp merged 1 commit intocontainerd:release/1.4from
zhsj:bpo-4974
Feb 8, 2021
Merged

[release/1.4] Update gogo/protobuf to v1.3.2#5018
estesp merged 1 commit intocontainerd:release/1.4from
zhsj:bpo-4974

Conversation

@zhsj
Copy link
Copy Markdown
Contributor

@zhsj zhsj commented Feb 8, 2021

Backport #4974

bump version 1.3.2 for gogo/protobuf due to CVE-2021-3121 discovered
in gogo/protobuf version 1.3.1, CVE has been fixed in 1.3.2

Signed-off-by: Aditi Sharma <[email protected]>

(cherry picked from commit 1423e91)

Signed-off-by: Shengjing Zhu <[email protected]>
@k8s-ci-robot
Copy link
Copy Markdown

Hi @zhsj. Thanks for your PR.

I'm waiting for a containerd member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@theopenlab-ci
Copy link
Copy Markdown

theopenlab-ci Bot commented Feb 8, 2021

Build succeeded.

Copy link
Copy Markdown
Member

@estesp estesp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants