Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Update grpc to to the next version to address CVEs

Description

CVE-2023-1428 & CVE-2023-32731 identified as part of powered by vulnerabilities require a version bump of grpc to grpc 1.58.0 to address the issues. This task is to take care of the version bump of grpc.

Acceptance / Success Criteria

None

Activity

Show:

Nishtha Kaura October 23, 2023 at 7:05 PM
Edited

Reviewed by Information Security

CVSS AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X

CVSS score 8.1 x likelihood moderate 0.8 = 6.5 medium

Nishtha Kaura October 23, 2023 at 7:00 PM

Is there a reasoning for using Version 1.58 and not 1.59 which is the latest version that is out and has a version bump of grpc. Maybe the scanner hasn’t incorporated the latest version?

Fixed

Details

Assignee

Reporter

Labels

HB Grooming Date

HB Backlog Status

Sprint

Fix versions

Priority

Parent

PagerDuty

Created October 12, 2023 at 5:20 PM
Updated October 7, 2024 at 5:59 PM
Resolved September 26, 2024 at 6:56 PM