Skip to content

chore(deps): update github/codeql-action action to v4.35.1#287

Merged
baksetercx merged 1 commit intotrunkfrom
renovate/github-codeql-action-4.x
Mar 31, 2026
Merged

chore(deps): update github/codeql-action action to v4.35.1#287
baksetercx merged 1 commit intotrunkfrom
renovate/github-codeql-action-4.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 30, 2026

This PR contains the following updates:

Package Type Update Change
github/codeql-action action patch v4.35.0v4.35.1

Release Notes

github/codeql-action (github/codeql-action)

v4.35.1

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown
Contributor

Integration Test Results

2 tests  +2   2 ✅ +2   1s ⏱️ -1s
1 suites +1   0 💤 ±0 
1 files   +1   0 ❌ ±0 

Results for commit 216196a. ± Comparison against base commit 96dba55.

@github-actions
Copy link
Copy Markdown
Contributor

Unit Test Results

1 tests  +1   1 ✅ +1   0s ⏱️ ±0s
1 suites +1   0 💤 ±0 
1 files   +1   0 ❌ ±0 

Results for commit 216196a. ± Comparison against base commit 96dba55.

@github-actions
Copy link
Copy Markdown
Contributor

⚠️ Vulnerabilities detected in ghcr.io/3lvia/core/vulnerable-service:latest-cache ⚠️

Found in: ghcr.io/3lvia/core/vulnerable-service:latest-cache (debian 10.13)

glibc: stack-based buffer overflow in netgroup cache – HIGH

ID: CVE-2024-33599

Package Name: libc-bin

Installed Version: 2.28-10+deb10u3

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

References:

glibc: stack-based buffer overflow in netgroup cache – HIGH

ID: CVE-2024-33599

Package Name: libc6

Installed Version: 2.28-10+deb10u3

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

References:

@baksetercx baksetercx merged commit 0f74a8e into trunk Mar 31, 2026
36 of 39 checks passed
@baksetercx baksetercx deleted the renovate/github-codeql-action-4.x branch March 31, 2026 08:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant