Skip to content

Updated the dependency to address sec-vuln#206

Merged
suraj-simha merged 1 commit into
mainfrom
VAULT-45686-secvuln-update
Jun 9, 2026
Merged

Updated the dependency to address sec-vuln#206
suraj-simha merged 1 commit into
mainfrom
VAULT-45686-secvuln-update

Conversation

@suraj-simha

@suraj-simha suraj-simha commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Jira: https://hashicorp.atlassian.net/browse/SECVULN-40739
This PR updates the google.golang.org/grpc version to 1.79.3 to apply the fix for GHSA-p77j-4mvh-x3m3.

Test Results:

make test
==> Checking that code complies with gofmt requirements...
go generate 
CGO_ENABLED=1 go test -tags='' $(go list ./... | grep -v /vendor/ | grep -v /integ)  -timeout=20m -parallel=4
# github.com/hashicorp/vault-plugin-database-oracle.test
ld: warning: duplicate -rpath '/usr/local/lib' ignored
ld: warning: ignoring duplicate libraries: '-lclntsh'
ok      github.com/hashicorp/vault-plugin-database-oracle       236.071s
?       github.com/hashicorp/vault-plugin-database-oracle/plugin        [no test files]

Overview

A high level description of the contribution, including:
Who the change affects or is for (stakeholders)?
What is the change?
Why is the change needed?
How does this change affect the user experience (if at all)?

Design of Change

How was this change implemented?

Related Issues/Pull Requests

[ ] Issue #1234
[ ] PR #1234

Contributor Checklist

[ ] Add relevant docs to upstream Vault repository, or sufficient reasoning why docs won’t be added yet
My Docs PR Link
Example
[ ] Add output for any tests not ran in CI to the PR description (eg, acceptance tests)
[ ] Backwards compatible

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.

  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

  • If applicable, I've documented the impact of any changes to security controls.

    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

@suraj-simha
suraj-simha requested a review from a team as a code owner June 4, 2026 05:42
@suraj-simha
suraj-simha merged commit dc8e652 into main Jun 9, 2026
7 checks passed
@suraj-simha
suraj-simha deleted the VAULT-45686-secvuln-update branch June 9, 2026 05:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants