Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

base: fix CVE-2022-3294 #2594

Merged
merged 1 commit into from
Apr 3, 2023
Merged

base: fix CVE-2022-3294 #2594

merged 1 commit into from
Apr 3, 2023
+1 −1

Conversation

zhangzujian
Copy link
Member

What type of this PR

  • Security

Which issue(s) this PR fixes:

Fixes CVE-2022-3294:

┌───────────────────┬───────────────┬──────────┬───────────────────┬──────────────────────────────────┬──────────────────────────────────────────────────────────────┐
│      Library      │ Vulnerability │ Severity │ Installed Version │          Fixed Version           │                            Title                             │
├───────────────────┼───────────────┼──────────┼───────────────────┼──────────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ k8s.io/kubernetes │ CVE-2022-3294 │ HIGH     │ v1.24.2           │ 1.22.16, 1.23.14, 1.24.8, 1.25.4 │ kubernetes: node address isn't always verified when proxying │
│                   │               │          │                   │                                  │ https://avd.aquasec.com/nvd/cve-2022-3294                    │
└───────────────────┴───────────────┴──────────┴───────────────────┴──────────────────────────────────┴──────────────────────────────────────────────────────────────┘

Sorry, something went wrong.

@zhangzujian
fix CVE-2022-3294

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode
94da24f
@zhangzujian zhangzujian requested a review from oilbeater April 3, 2023 07:37
@zhangzujian zhangzujian changed the title fix CVE-2022-3294 base: fix CVE-2022-3294 Apr 3, 2023
@zhangzujian zhangzujian merged commit 7a69233 into release-1.11 Apr 3, 2023
@zhangzujian zhangzujian deleted the fix-cve branch April 3, 2023 08:16
zhangzujian added a commit that referenced this pull request Apr 3, 2023
@zhangzujian
base: fix CVE-2022-3294 (#2594)
b0bb945
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@oilbeater oilbeater

Assignees
No one assigned
Labels
need backport security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@zhangzujian @oilbeater