search

openshift / oc

The OpenShift Command Line, part of OKD
https://www.openshift.org
Apache License 2.0
196 stars 377 forks source link

CVE-2024-24790 found in v4.16.0 #1809

Closed NeoWilson closed 3 months ago

NeoWilson commented 3 months ago

I recently scan my image that uses this tool with Trivy container scanner and found this new CVE-2024-24790. After investigation, it is seem that the vulnerability is due to the older version of Golang being used.

ardaguclu commented 3 months ago

Golang bumps are performed automatically and this CVE will be covered during the bumps as well. Thank you for raising this issue. I'd prefer closing this as we don't do anything in oc.

/close

openshift-ci[bot] commented 3 months ago

@ardaguclu: Closing this issue.

In response to [this](https://github.com/openshift/oc/issues/1809#issuecomment-2203086704): >Golang bumps are performed automatically and this CVE will be covered during the bumps as well. Thank you for raising this issue. I'd prefer closing this as we don't do anything in oc. > >/close Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.