78e1d24d47
Upgrade golang to 1.19.11 to fix CVE-2023-29406 ( #5828 )
2023-07-13 13:55:07 -07:00
c5a190f783
[AUTOPATCHER-CORE] Upgrade golang to 1.19.10 Address CVE-2023-24540, CVE-2023-29402, CVE-2023-29403, CVE-2023-29404, CVE-2023-29405 ( #5689 )
...
* Upgrade golang to 1.19.10 Adress CVEs
* Fix changelog
---------
Co-authored-by: Mitch Zhu <mitchzhu@microsoft.com>
2023-06-20 13:39:41 -07:00
a364e616af
golang: upgrade to 1.19.8 to address CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538 ( #5228 )
...
Reference: https://github.com/golang/go/issues?q=milestone%3AGo1.19.8+label%3ASecurity
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-04-05 21:38:04 +05:30
42a2d6d72d
Upgrade golang to 1.19.7 to address CVE-2023-24532 ( #5160 )
...
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-03-28 13:20:34 +05:30
768aae23e3
Upgrade golang to 1.19.6 Address CVE-2022-41722, CVE-2022-41724, CVE-2022-41725, CVE-2022-41723 ( #5096 )
...
Co-authored-by: Rakshaa Viswanathan <46165429+rakshaa2000@users.noreply.github.com>
2023-03-17 21:20:58 +05:30
63c1d45e66
[AUTOPATCHER-CORE] Upgrade golang to 1.19.4 upgrade to latest - ( #4643 )
...
* Upgrade golang to 1.19.4 upgrade to latest
* fix issues due to golang 1.19.4 upgrade
* re-add CVE-2022-41717.patch which is required by golang 1.17 spec
* clean up gh dependencies
2023-01-19 18:37:17 +01:00
449fbf1b41
Patch golang to resolve CVE-2022-41717 ( #4457 )
...
* Patch golang to resolve CVE-2022-41717
2022-12-19 12:17:43 -08:00
a828f488f8
Upgrade golang to 1.18.8 to fix CVE-2022-2879, CVE-2022-2880, CVE-2022-41715, CVE-2022-27664, CVE-2022-32190 ( #4157 )
2022-11-01 16:37:38 -07:00
ca5edac616
resolve terraform CVE ( #3965 )
...
Co-authored-by: Henry Li <lihl@microsoft.com>
2022-10-11 10:11:30 -07:00
fdc6619ad3
Bump supported go versions to 1.17.13, 1.18.5 to fix fifteen CVEs ( #3600 )
...
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
2022-08-24 09:01:02 -07:00
d76052103a
golang: bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327 ( #3163 )
...
* golang: rename specfile golang-1.17.spec -> golang.spec
* golang: bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327
* golang: bump release of dependent packages to force rebuild
* keda: verify license
* helm: verify license
* moby-containerd: bump version to 1.6.2 to address CVE-2022-24769
* golang: add go-1.17.10 to enable cert-manager
* cert-manger: add a hard BR on golang <= 1.17.10
* golang-17: add entry to cgimanifest
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2022-06-16 23:07:41 +05:30
fd77f53827
Upgrade terraform version to 1.2.2 ( #3135 )
...
* Upgrade terraform version to 1.2.2
* Update date correctly in change log
2022-06-08 12:10:43 -07:00
404e329c73
Nopatch CVE-2018-9057 ( #2978 )
2022-05-09 16:52:02 -07:00
8855d7663f
Use golang >= 1.17.1 with terraform ( #2614 )
...
* use golang >= 1.17.1 with terraform
* linting terraform.spec
2022-03-29 16:23:51 -07:00
34c1d393e4
Add RPM spec for terraform ( #2575 )
2022-03-28 12:04:14 -07:00
CBL-Mariner-Bot
Muhammad Falak R Wani
Daniel McIlvaney
Olivia Crain
Henry Li
Olivia Crain
chalamalasetty
jslobodzian
Andrew Phelps
Matthew Torr