Automated cherry pick of #112693: Fixed (CVE-2022-27664) Bump golang.org/x/net to

[aimuz]

Cherry pick of #112693 on release-1.23.

#112693: Fixed (CVE-2022-27664) Bump golang.org/x/net to

For details on the cherry pick process, see the cherry pick requests page.

[k8s-ci-robot]

@aimuz: This cherry pick PR is for a release branch and has not yet been approved by Release Managers.
Adding the do-not-merge/cherry-pick-not-approved label.

To merge this cherry pick, it must first be approved (/lgtm + /approve) by the relevant OWNERS.

AFTER it has been approved by code owners, please leave the following comment on a line by itself, with no leading whitespace: /cc kubernetes/release-managers

(This command will request a cherry pick review from Release Managers and should work for all GitHub users, whether they are members of the Kubernetes GitHub organization or not.)

For details on the patch release process and schedule, see the Patch Releases page.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-ci-robot]

Hi @aimuz. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: aimuz
Once this PR has been reviewed and has the lgtm label, please assign liggitt for approval by writing /assign @liggitt in a comment. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS
• staging/src/k8s.io/api/OWNERS
• staging/src/k8s.io/legacy-cloud-providers/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[aimuz]

/kind bug

[aimuz]

/hold

[aimuz]

/test pull-kubernetes-verify

[k8s-ci-robot]

@aimuz: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-kubernetes-dependencies	a28108f	link	true	/test pull-kubernetes-dependencies
pull-kubernetes-integration	a28108f	link	true	/test pull-kubernetes-integration
pull-kubernetes-e2e-aks-engine-windows-containerd-1-23	a28108f	link	false	/test pull-kubernetes-e2e-aks-engine-windows-containerd-1-23

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[aimuz]

Might need to copy golang.org/x/sys into the project?

https://github.com/golang/sys/tree/aba9fc2a8ff2c9439446386f616b860442f0cf9a

aba9fc2a8ff2c9439446386f616b860442f0cf9a is the first bad commit
commit aba9fc2a8ff2c9439446386f616b860442f0cf9a
Author: Tobias Klauser <tklauser@distanz.ch>
Date:   Tue Sep 6 10:59:06 2022 +0200

    unix: use unsafe.Slice instead of unsafeheader package

    Go 1.18 is the minimum supported Go version and unsafe.Slice was
    introduced in Go 1.17.

    Change-Id: Ie5f1fad01f219e7b7a190de2c49676f366ad3bc7
    Reviewed-on: https://go-review.googlesource.com/c/sys/+/428515
    TryBot-Result: Gopher Robot <gobot@golang.org>
    Reviewed-by: Benny Siegert <bsiegert@gmail.com>
    Reviewed-by: Ian Lance Taylor <iant@google.com>
    Run-TryBot: Tobias Klauser <tobias.klauser@gmail.com>

 unix/syscall.go             |  9 +--------
 unix/syscall_darwin.1_13.go | 12 ++----------
 unix/syscall_unix.go        |  8 +-------
 unix/sysvshm_unix.go        | 13 ++-----------
 4 files changed, 6 insertions(+), 36 deletions(-)

[aimuz]

Might need to copy golang.org/x/sys into the project?

[fedebongio]

/triage accepted

[aimuz]

Waiting #113416

[k8s-ci-robot]

@aimuz: PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[aimuz]

@liggitt

Does the 113983 change include the change of the current PR? If so, I will close this PR. Thank you for your reply

[liggitt]

Yes, it includes this fix