Skip to content

Update go dependencies for CVEs#132

Merged
djoreilly merged 2 commits intoSUSE:sensor-base-0.7.0from
djoreilly:fix-cves
Jun 27, 2025
Merged

Update go dependencies for CVEs#132
djoreilly merged 2 commits intoSUSE:sensor-base-0.7.0from
djoreilly:fix-cves

Conversation

@djoreilly
Copy link

No description provided.

@djoreilly djoreilly requested review from gosipyan and xTeixeira June 17, 2025 12:14
@djoreilly djoreilly marked this pull request as draft June 18, 2025 10:33
Fixes CVE-2025-30204 (bsc#1240462, bsc#1240448)
Fixes CVE-2025-27144 (bsc#1237623, bsc#1237626)
@djoreilly
Copy link
Author

Dropped golang.org/x/net v0.33.0 and github.com/gorilla/csrf v1.7.3 as they won't build with go1.19

@djoreilly djoreilly marked this pull request as ready for review June 18, 2025 11:09
@djoreilly djoreilly merged commit f21d922 into SUSE:sensor-base-0.7.0 Jun 27, 2025
3 checks passed
@djoreilly djoreilly deleted the fix-cves branch June 27, 2025 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants