[Bug 1227005] VUL-0: CVE-2024-3817: minikube: hashicorp/go-getter: argument injection when fetching remote default git branches

https://bugzilla.suse.com/show_bug.cgi?id=1227005 https://bugzilla.suse.com/show_bug.cgi?id=1227005#c2 --- Comment #2 from Andrea Mattiazzo <andrea.mattiazzo@suse.com> --- Affected Products / Versions: go-getter 1.5.9 up to 1.7.3; fixed in 1.7.4 openSUSE:Factory is at 1.7.6 so already fixed. openSUSE:Backports:SLE-15-SP6/minikube and openSUSE:Backports:SLE-15-SP5/minikube still needs an update. -- You are receiving this mail because: You are on the CC list for the bug.