Skip to content

Conversation

@thaJeztah
Copy link
Member

This builds on top of the changes from #2985

full diff: gogo/protobuf@v1.3.1...v1.3.2

bump version 1.3.2 for gogo/protobuf due to CVE-2021-3121 reported on
gogo/protobuf version 1.3.1, CVE has been fixed for version 1.3.2

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121

@codecov
Copy link

codecov bot commented Apr 6, 2021

Codecov Report

Merging #3002 (05f952d) into master (d6592dd) will decrease coverage by 0.94%.
The diff coverage is 23.29%.

@@            Coverage Diff             @@
##           master    #3002      +/-   ##
==========================================
- Coverage   61.77%   60.82%   -0.95%     
==========================================
  Files         142      142              
  Lines       23005    20272    -2733     
==========================================
- Hits        14211    12331    -1880     
+ Misses       7303     6474     -829     
+ Partials     1491     1467      -24     

@thaJeztah
Copy link
Member Author

@dperny @tonistiigi @cpuguy83 ptal

@cpuguy83
Copy link
Member

cpuguy83 commented Apr 7, 2021

This is also updating etcd, is that expected?

@thaJeztah
Copy link
Member Author

This is also updating etcd, is that expected?

@cpuguy83 yes, that's part of #2985, which aligns it with the version in use in moby/moby

Copy link
Member

@cpuguy83 cpuguy83 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dperny dperny merged commit 5a5494a into moby:master Apr 15, 2021
@thaJeztah thaJeztah deleted the bump_gogo_protobuf branch April 17, 2021 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants