chore(deps): update module golang.org/x/net to v0.33.0 [security] (release-3.3.x) #15892
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
area/security
dependencies
renovate
bot
requested review from
xperimental,
JoaoBraveCoding and
a team
as code owners
ℹ Artifact update noticeFile name: cmd/chunks-inspect/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: cmd/segment-inspect/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: operator/api/loki/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: operator/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: pkg/push/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: tools/lambda-promtail/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
This PR contains the following updates:
v0.27.0->v0.33.0v0.23.0->v0.33.0v0.29.0->v0.33.0Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 / GHSA-w32m-9786-jp63 / GO-2024-3333
More information
Details
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NReferences
This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).
Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 / GHSA-w32m-9786-jp63 / GO-2024-3333
More information
Details
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
Severity
Unknown
References
This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.