chore(deps): update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [security] - #138
chore(deps): update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [security]#138renovate[bot] wants to merge 1 commit into
Conversation
…security] Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Hi @renovate[bot]. Thanks for your PR. I'm waiting for a cert-manager member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
This PR contains the following updates:
v3.6.8→v3.6.14Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Unbounded TLS handshake goroutines in go.etcd.io/etcd/client/pkg/v3
BIT-etcd-2026-73500 / CVE-2026-73500 / GHSA-6vch-q96h-7gc3 / GO-2026-6107
More information
Details
In go.etcd.io/etcd/client/pkg/v3 before 3.5.33, 3.6.14, and 3.7.1, TLS handshakes on listeners created by NewTLSListener do not enforce a handshake deadline. An unauthenticated network attacker who connects to an etcd TLS listener without sending a ClientHello causes a goroutine and a tracking map entry to block indefinitely. Opening many such connections exhausts memory, leading to a denial of service.
Severity
Unknown
References
This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).
Release Notes
etcd-io/etcd (go.etcd.io/etcd/client/pkg/v3)
v3.6.14Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.v3.6.13Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.v3.6.12Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.v3.6.11Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.v3.6.10Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.v3.6.9Compare Source
Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).
For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.
Linux
macOS (Darwin)
Docker
etcd uses
gcr.io/etcd-development/etcdas a primary container registry, andquay.io/coreos/etcdas secondary.Configuration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.