Bump protobuf version #67

Merged

fyrchik merged 1 commit from dstepanov-yadro/frostfs-api-go:fix/protobuf_vulncheck into master

2024-03-06 10:29:55 +00:00

dstepanov-yadro commented

2024-03-06 10:17:43 +00:00

Member

Found by vulncheck:

Vulnerability #1: GO-2024-2611
    Infinite loop in JSON unmarshaling in google.golang.org/protobuf
  More info: https://pkg.go.dev/vuln/GO-2024-2611
  Module: google.golang.org/protobuf
    Found in: google.golang.org/protobuf@v1.32.0
    Fixed in: google.golang.org/protobuf@v1.33.0

Despite the fact that version 1.30.0 is used, I suggest making one version as in frostfs-node.

Found by vulncheck: ``` Vulnerability #1: GO-2024-2611 Infinite loop in JSON unmarshaling in google.golang.org/protobuf More info: https://pkg.go.dev/vuln/GO-2024-2611 Module: google.golang.org/protobuf Found in: google.golang.org/protobuf@v1.32.0 Fixed in: google.golang.org/protobuf@v1.33.0 ``` Despite the fact that version 1.30.0 is used, I suggest making one version as in frostfs-node.

dstepanov-yadro force-pushed fix/protobuf_vulncheck from 363d2e97ae to c1c7b344b9

2024-03-06 10:18:52 +00:00

Compare