chef / knife-vsphere

Chef knife plug-in for VMware vSphere
Apache License 2.0
202 stars 125 forks source link

[CVE] Removed the netaddr gem #535

Closed ashiqueps closed 1 year ago

ashiqueps commented 1 year ago

Description

As part of the workstation release readiness checks, found that the netaddr v1.5.3 has a critical vulnerability(CVE-2019-17383). The solution was to upgrade that to 2.x, but the usage of the netaddr gem in this repo was to do CIDR operations. But version 2.x doesn't support the CIDR operation and we had to do that manually. This PR removed the netaddr gem, since that is not needed anymore and updated the CIDR code to handle manually.

Related Issue

Types of changes

Checklist:

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication