Skip to content

fix(security): upgrade container base packages and update golang.org/x/net - #753

Merged
bstoll merged 1 commit into
openconfig:mainfrom
bstoll:security-vuln-fixes
Oct 13, 2026
Merged

bstoll merged 1 commit into
openconfig:mainfrom
bstoll:security-vuln-fixes

Conversation

@bstoll

@bstoll bstoll commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Dockerfile.lemming: Run apt-get upgrade -y in container stages to pick up Debian bookworm-security package updates, and install libpcap-dev and ca-certificates in the shared build stage so both release and debug targets compile cleanly.
  • go.mod / operator/go.mod / repositories.bzl: Update golang.org/x/net to v0.60.0 across both modules and sync Bazel repository definitions via Gazelle.

@bstoll
bstoll requested a review from a team as a code owner October 13, 2026 02:18
@bstoll
bstoll merged commit 48c399c into openconfig:main Oct 13, 2026
15 checks passed
@bstoll
bstoll deleted the security-vuln-fixes branch October 13, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants