Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump otel/contrib to v0.46+ #447

Closed
guicassolato opened this issue Nov 22, 2023 · 0 comments · Fixed by #448
Closed

Bump otel/contrib to v0.46+ #447

guicassolato opened this issue Nov 22, 2023 · 0 comments · Fixed by #448
Assignees
@alexsnaps
Labels
area/dependencies Pull requests that update a dependency file size/small
Milestone
v0.16.x

Comments

@guicassolato
Copy link
Collaborator

Upgrade OpenTelemetry Go Contrib packages to v0.46.0+ to address the following CVEs:

Package Advisory Affected version Patched version
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc CVE-2023-47108 0.46.0 0.46.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp CVE-2023-45142 0.44.0 0.44.0
@guicassolato guicassolato added area/dependencies Pull requests that update a dependency file size/small target/current labels Nov 22, 2023
@guicassolato guicassolato added this to the v0.16.x milestone Nov 22, 2023
@guicassolato guicassolato moved this to Todo in Kuadrant Nov 22, 2023
@alexsnaps alexsnaps mentioned this issue Nov 22, 2023
Merged
@alexsnaps alexsnaps moved this from Todo to In Progress in Kuadrant Nov 22, 2023
@alexsnaps alexsnaps self-assigned this Nov 22, 2023
@github-project-automation github-project-automation bot moved this from In Progress to Done in Kuadrant Nov 23, 2023
@github-project-automation github-project-automation bot moved this from To do to To test in Kuadrant Service Protection Nov 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@alexsnaps alexsnaps

Labels
area/dependencies Pull requests that update a dependency file size/small
Projects
Kuadrant
Archived in project
Kuadrant Service Protection
Status: To test
Milestone
v0.16.x
Development

Successfully merging a pull request may close this issue.

Upgrade otel deps to 0.46.1 Kuadrant/authorino
2 participants
@alexsnaps @guicassolato