[Bug 1219388] VUL-0: CVE-2024-23840: eksctl: goreleaser: goreleaser release --debug shows secrets

https://bugzilla.suse.com/show_bug.cgi?id=1219388 https://bugzilla.suse.com/show_bug.cgi?id=1219388#c2 --- Comment #2 from Johannes Kastl <opensuse_buildservice@ojkastl.de> --- Sorry for the late reply. eksctl got several updates in the last couple of weeks. The latest 0.170.0 includes github.com/goreleaser/goreleaser v1.11.5 according to the go.mod. According to the Security advisory 1.23.0 is affected and 1.24.0 is safe. Not sure about 1.11.5... -- You are receiving this mail because: You are on the CC list for the bug.