Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of security: Upgrade Go to 1.21.10 into release/1.4.x #3984

Conversation

hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #3980 to be assessed for backporting due to the inclusion of the label backport/1.4.x.

The below text is copied from the body of the original PR.


Description

This resolves CVE-2024-24787 and CVE-2024-24788.

Testing & Reproduction steps

CI continues to pass.

Links

https://groups.google.com/g/golang-announce/c/wkkO4P9stm0

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

Overview of commits

auto-merge was automatically disabled May 9, 2024 16:29

Pull request was closed

@dduzgun-security dduzgun-security merged commit 59c66dd into release/1.4.x May 9, 2024
58 of 59 checks passed
@dduzgun-security dduzgun-security deleted the backport/security/net-9224-bump-go-1.21.10/intensely-vocal-rhino branch May 9, 2024 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants