Code

k3s/1.31.2.1-r4: cve remediation#35686

Code

Merged

luhring merged 4 commits intomainwolfi-dev/os:mainfrom cve-k3s-75cf6a6492b533da61c59ef9a6604f00wolfi-dev/os:cve-k3s-75cf6a6492b533da61c59ef9a6604f00Copy head branch name to clipboardDec 12, 2024

+4-4

Commits

Commits on Dec 12, 2024

• k3s/1.31.2.1-r4: fix GHSA-px8v-pp82-rcvr

  

  octo-sts[bot]

  authored and

  mamccorm

  committed
  0fda423

  Copy full SHA for 0fda423

• bump dependency 'go-libp2p to v0.37.2, which is required for the later quic-go package, which we've in-turn bumped to remediate GHSA-px8v-pp82-rcvr'

  Show description for 3edbaa1
  mamccorm

  committed
  3edbaa1

  Copy full SHA for 3edbaa1

• Upgrade to latest k3s version, remove grpc go/bump which is no longer needed.

  Show description for b90cbb0
  mamccorm

  committed
  b90cbb0

  Copy full SHA for b90cbb0

• readd grpc go/bump, removed in last commit

  Show description for ec999e6
  mamccorm

  committed
  ec999e6

  Copy full SHA for ec999e6