diff --git a/.circleci/config.yml b/.circleci/config.yml index be561ba925..1984e2f27c 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -6,7 +6,7 @@ orbs: parameters: go-version: type: string - default: '1.25.2' + default: '1.25.3' executors: node: diff --git a/CHANGELOG.md b/CHANGELOG.md index 9ff03c3f0e..1dfd76f52d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # SingularityCE Changelog +## 4.3.4 \[2025-10-14\] + +### Security Related Fixes + +- GitHub release packages built using Go 1.25.3, due to + [large number of denial-of-service CVEs fixed in 1.25.2.](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI) +- All dependencies updated. + ## 4.3.3 \[2025-08-20\] ### Requirements / Packaging diff --git a/INSTALL.md b/INSTALL.md index f66e2e6886..1458e3dd25 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -162,7 +162,7 @@ _**NOTE:** if you are updating Go from a older version, make sure you remove `/usr/local/go` before reinstalling it._ ```sh -export VERSION=1.25.2 OS=linux ARCH=amd64 # change this as you need +export VERSION=1.25.3 OS=linux ARCH=amd64 # change this as you need wget -O /tmp/go${VERSION}.${OS}-${ARCH}.tar.gz \ https://dl.google.com/go/go${VERSION}.${OS}-${ARCH}.tar.gz diff --git a/e2e/testdata/Dockerfile.nested b/e2e/testdata/Dockerfile.nested index b125f9888c..c46950aab9 100644 --- a/e2e/testdata/Dockerfile.nested +++ b/e2e/testdata/Dockerfile.nested @@ -1,6 +1,6 @@ FROM ubuntu:25.04 -ARG GOVERSION="go1.25.2" +ARG GOVERSION="go1.25.3" ARG GOOS="linux" ARG GOARCH="amd64" ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin