CVE-2024-24790 Vulnerability reported for Cluster-Autoscaler

kubernetes / autoscaler

Autoscaling components for Kubernetes

Apache License 2.0

8.1k stars 3.98k forks source link

CVE-2024-24790 Vulnerability reported for Cluster-Autoscaler #7020

Open harangar opened 4 months ago

harangar commented 4 months ago

Which component are you using?: Cluster Autoscaler

Is your feature request designed to solve a problem? If so describe the problem this feature should solve.: Vulnerability CVE-2024-24790 - stdlib go1.22.2 reported for Cluster Autoscaler version 1.30.1.

Describe the solution you'd like.: Please upgrade the golang version to 1.22.4 or higer.

adrianmoisey commented 4 months ago

/area cluster-autoscaler

k8s-triage-robot commented 1 month ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

After 90d of inactivity, lifecycle/stale is applied
After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

Mark this issue as fresh with /remove-lifecycle stale
Close this issue with /close
Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot commented 2 weeks ago

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

After 90d of inactivity, lifecycle/stale is applied
After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

Mark this issue as fresh with /remove-lifecycle rotten
Close this issue with /close
Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten