Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Closes request #35489 golang.org/x/crypto: 0.14.0 -> 0.17.0

Download Browse

Fixes GO-2023-2402 / CVE-2023-48795. How to test: $ nix-build src/additional-packages/tuleap-mercure.nix $ cp result/tuleap-mercure<version>.rpm . $ make bash-web $ rpm -Uvh --nodeps /usr/share/tuleap-mercure<version>.rpm $ systemctl start tuleap-mercure $ tuleap config-set feature_flag_enable_mercure_dev_kanban 1 - Realtime features using Mercure should still work as before in Kanban. No functional changes expected. Change-Id: Icafb7c2652cff47ad3d3b695985cd3edc202b670

+13 −13
Thomas Gerbet (tgerbet) 2023-12-19 08:32
Joris MASSON (jmasson) 2023-12-19 11:01
1bc23d2e868d02daf27eb9c0997d7416030c1324
3681841d55f8300ba0d21e6ccc4a0ebc4c9491eb
git #tuleap/stable/1bc23d2e868d02daf27eb9c0997d7416030c1324

Modified Files

Side by side diff
Inline diff
Name
M src/additional-packages/tuleap-mercure.nix +1 −1 Go to diff View file
M src/additional-packages/tuleap-mercure/go.mod +4 −4 Go to diff View file
M src/additional-packages/tuleap-mercure/go.sum +8 −8 Go to diff View file