Skip to content

Insecure Temporary File usage in github.com/golang/glog #59247

Closed
#59250
Closed
Insecure Temporary File usage in github.com/golang/glog#59247
#59250
Labels
affects-8.5This bug affects the 8.5.x(LTS) versions.severity/moderatesig/sql-infraSIG: SQL Infratype/bugThe issue is confirmed as a bug.

Description

@hawkingrei
hawkingrei
opened on Feb 5, 2025

Bug Report

Please answer these questions before submitting your issue. Thanks!

1. Minimal reproduce step (Required)

Image

ref https://github.com/pingcap/tidb/security/dependabot/87

2. What did you expect to see? (Required)

3. What did you see instead (Required)

4. What is your TiDB version? (Required)

Activity

  1. hawkingrei
    added
    type/bugThe issue is confirmed as a bug.
    sig/sql-infraSIG: SQL Infra
    severity/moderate
    on Feb 5, 2025
  2. ti-chi-bot
    closed this as completedin #59250on Feb 5, 2025
  3. ti-chi-bot
    closed this as completedin 20e73a8on Feb 5, 2025
  4. sthagen
    added a commit that references this issue on Feb 5, 2025

    *: upgrade golang/glog to fix insecure temporary file usage (pingcap#…

    20e73a8

  5. hawkingrei commented on Feb 5, 2025

    @hawkingrei
    hawkingrei
    on Feb 5, 2025
    ContributorAuthor

    /cherrypick release-8.5

  6. ti-chi-bot
    added a commit that references this issue on Feb 5, 2025

    *: upgrade golang/glog to fix insecure temporary file usage (pingcap#…

    beb2d19
  7. ti-chi-bot
    added
    affects-8.5This bug affects the 8.5.x(LTS) versions.
    on Feb 5, 2025
  8. ti-chi-bot
    added a commit that references this issue on Feb 6, 2025

    *: upgrade golang/glog to fix insecure temporary file usage (#59250) (#…

    715c096
  9. zeminzhou
    added a commit that references this issue on May 6, 2025

    *: upgrade golang/glog to fix insecure temporary file usage (pingcap#…

    43d09f7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    affects-8.5This bug affects the 8.5.x(LTS) versions.severity/moderatesig/sql-infraSIG: SQL Infratype/bugThe issue is confirmed as a bug.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions