Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: bump golang net and grpc lib to secure version #49

Merged
merged 2 commits into from
Nov 13, 2023

Conversation

j75689
Copy link
Collaborator

@j75689 j75689 commented Nov 13, 2023

Description

bump golang net and grpc lib to secure version
https://github.com/bnb-chain/greenfield-cometbft/actions/runs/6729943597/job/18291711132?pr=47

Rationale

Vulnerability #1: GO-2023-2102
    HTTP/2 rapid reset can cause excessive work in net/http
  More info: https://pkg.go.dev/vuln/GO-2023-2102
  Module: golang.org/x/net
    Found in: golang.org/x/[email protected]
    Fixed in: golang.org/x/[email protected]
Vulnerability #1: GO-2023-2153
    denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2023-2153
  Module: google.golang.org/grpc
    Found in: google.golang.org/[email protected]
    Fixed in: google.golang.org/[email protected]

Example

n/a

Changes

Notable changes:

  • deps

@j75689 j75689 added this pull request to the merge queue Nov 13, 2023
Merged via the queue into bnb-chain:develop with commit 9c668b7 Nov 13, 2023
15 checks passed
@j75689 j75689 deleted the chore/update_dep branch November 13, 2023 06:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants