Skip to content

🔒 Upgrade dependencies to address known CVEs#363

Open
LordOverlord wants to merge 47 commits intobcicen:masterfrom
LordOverlord:master
Open

🔒 Upgrade dependencies to address known CVEs#363
LordOverlord wants to merge 47 commits intobcicen:masterfrom
LordOverlord:master

Conversation

@LordOverlord
Copy link
Copy Markdown

This PR updates several dependencies to mitigate known vulnerabilities:

Upgraded github.com/docker/docker to v26.1.5+incompatible to address:

    [CVE-2024-24557](https://avd.aquasec.com/nvd/cve-2024-24557)

    [CVE-2024-41110](https://avd.aquasec.com/nvd/cve-2024-41110)

Upgraded golang.org/x/sys to v0.32.0 to fix:

    CVE-2023-49946

Build tested across GOOS={linux,darwin,windows} with no regressions found.

This fork uses these updates to maintain security compliance for containerized environments and public registry publishing.

Let me know if adjustments or splitting of PRs is preferred. Happy to collaborate!

Comment thread cwidgets/main.go
import (
"github.com/bcicen/ctop/logging"
"github.com/bcicen/ctop/models"
"github.com/lordoverlord/ctop/logging"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should these lines be changing if you are intending to merge into bcicen's repo?

Im not sure this repo is maintained anymore :(

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems correct, should change those lines to contribute to this repo..

… fixes (#5)

* rework of the runc for addresing high score vulnerabilities

* cleanup from dockerfile

* overhaul to github actions, binary and docker image

* fix for the docker job

* fix for snyk step
* rework of the runc for addresing high score vulnerabilities

* cleanup from dockerfile

* overhaul to github actions, binary and docker image

* fix for the docker job

* fix for snyk step

* fix(docker): live uptime updates and inspect api cleanup

* fix(ui): init uptime meta and widen column
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants