Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update golang to 1.18.5 #43903

Merged
merged 1 commit into from Aug 4, 2022
Merged

Update golang to 1.18.5 #43903

merged 1 commit into from Aug 4, 2022

Conversation

thaJeztah
Copy link
Member

Update Go runtime to 1.18.5 to address CVE-2022-32189.

Full diff: golang/go@go1.18.4...go1.18.5


From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10

We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.

These minor releases include 1 security fixes following the security
policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is
too short.

This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

@thaJeztah thaJeztah added this to the v-next milestone Aug 3, 2022
@thaJeztah thaJeztah changed the title Update golang to 1.18.5, 1.17.13 Update golang to 1.18.5 Aug 3, 2022
Update Go runtime to 1.18.5 to address CVE-2022-32189.

Full diff: golang/go@go1.18.4...go1.18.5

--------------------------------------------------------

From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10

We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.

These minor releases include 1 security fixes following the security
policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is
too short.

This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@thaJeztah
Copy link
Member Author

Hmm... seen this failure a few times now I think; not sure what it is;

=== FAIL: github.com/docker/docker/integration-cli TestDockerCLIRmiSuite/TestRmiWithContainerFails (1.49s)
    docker_cli_rmi_test.go:32: assertion failed: 
        Command:  D:\a\moby\moby\out\docker.exe run -d busybox true
        ExitCode: 125
        Error:    exit status 125
        Stdout:   09dcc463c142e2fbca675af66fc2a4d274f943c3e681858f1383ff7693b72b49
        
        Stderr:   D:\a\moby\moby\out\docker.exe: Error response from daemon: hcs::CreateComputeSystem 09dcc463c142e2fbca675af66fc2a4d274f943c3e681858f1383ff7693b72b49: Element not found.
        
        
        Failures:
        ExitCode was 125 expected 0
        Expected no error
    --- FAIL: TestDockerCLIRmiSuite/TestRmiWithContainerFails (1.49s)

@thaJeztah
Copy link
Member Author

Thx for reviewing; let me bring this one in; I doubt there's gonna be objections against that 😅

@thaJeztah thaJeztah merged commit 68f27cd into moby:master Aug 4, 2022
@thaJeztah thaJeztah deleted the bump_go_1.18.5 branch August 4, 2022 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants