Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade go build version to 1.20.12 #66

Merged
merged 1 commit into from
Jan 13, 2024
Merged

Upgrade go build version to 1.20.12 #66

merged 1 commit into from
Jan 13, 2024

Conversation

dalibor
Copy link
Collaborator

@dalibor dalibor commented Dec 26, 2023

go1.20.11 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker and the net/http package. See the Go 1.20.11 milestone on our issue tracker for details.

go1.20.12 (released 2023-12-05) includes security fixes to the go command, and the net/http and path/filepath packages, as well as bug fixes to the compiler and the go command. See the Go 1.20.12 milestone on our issue tracker for details.

Also, making test workflow go version consistent with the publish workflow go version.

CVEs:

{
  "CVE": "CVE-2023-45283",
  "CVSS": "7.50",
  "Fixed On": "15 Dec 23 11:55 UTC",
  "Link": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45283",
  "Package Name": "go",
  "Package Type": "Binary",
  "Package Version": "1.20.10",
  "Severity": "high",
  "Status": "fixed in 1.21.4, 1.20.11"
},
{
  "CVE": "CVE-2023-45285",
  "CVSS": "7.50",
  "Fixed On": "12 Dec 23 19:40 UTC",
  "Link": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45285",
  "Package Name": "go",
  "Package Type": "Binary",
  "Package Version": "1.20.10",
  "Severity": "high",
  "Status": "fixed in 1.21.5, 1.20.12"
}

@dalibor dalibor requested a review from jgowdy December 26, 2023 09:28
@jgowdy jgowdy merged commit 9075120 into main Jan 13, 2024
3 checks passed
@jgowdy jgowdy deleted the golang_1.20.12 branch January 13, 2024 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants