mirror of https://github.com/status-im/consul.git
15 lines
745 B
Plaintext
15 lines
745 B
Plaintext
|
```release-note:security
|
|||
|
|
Upgrade to use Go `1.21.8`. This resolves CVEs
|
|||
|
|
[CVE-2024-24783](https://nvd.nist.gov/vuln/detail/CVE-2024-24783) (`crypto/x509`).
|
|||
|
|
[CVE-2023-45290](https://nvd.nist.gov/vuln/detail/CVE-2023-45290) (`net/http`).
|
|||
|
|
[CVE-2023-45289](https://nvd.nist.gov/vuln/detail/CVE-2023-45289) (`net/http`, `net/http/cookiejar`).
|
|||
|
|
[CVE-2024-24785](https://nvd.nist.gov/vuln/detail/CVE-2024-24785) (`html/template`).
|
|||
|
|
[CVE-2024-24784](https://nvd.nist.gov/vuln/detail/CVE-2024-24784) (`net/mail`).
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
```release-note:security
|
|||
|
|
Update the Consul Build Go base image to `alpine3.19`. This resolves CVEs
|
|||
|
|
[CVE-2023-52425](https://nvd.nist.gov/vuln/detail/CVE-2023-52425)
|
|||
|
|
[CVE-2023-52426](https://nvd.nist.gov/vuln/detail/CVE-2023-52426)
|
|||
|
|
```
|