status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

[NET-5574] Update Go version to 1.20.8 (#18742) 

Update Go version to 1.20.8

This resolves several CVEs (see changelog entry).
This commit is contained in:
Michael Zalimeni 2023-09-12 11:40:51 -04:00 committed by GitHub
parent 264166fcc0
commit 5e7afdf9a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 20 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.changelog/18742.txt Normal file
View File

@ -0,0 +1,8 @@
```release-note:security
Upgrade to use Go 1.20.8. This resolves CVEs
[CVE-2023-39320](https://github.com/advisories/GHSA-rxv8-v965-v333) (`cmd/go`),
[CVE-2023-39318](https://github.com/advisories/GHSA-vq7j-gx56-rxjh) (`html/template`),
[CVE-2023-39319](https://github.com/advisories/GHSA-vv9m-32rr-3g55) (`html/template`),
[CVE-2023-39321](https://github.com/advisories/GHSA-9v7r-x7cv-v437) (`crypto/tls`), and
[CVE-2023-39322](https://github.com/advisories/GHSA-892h-r6cr-53g4) (`crypto/tls`)
```

22
.github/workflows/build.yml vendored
View File

@ -85,15 +85,15 @@ jobs:
strategy:
matrix:
include:
- {go: "1.20.7", goos: "linux", goarch: "386"}
- {go: "1.20.7", goos: "linux", goarch: "amd64"}
- {go: "1.20.7", goos: "linux", goarch: "arm"}
- {go: "1.20.7", goos: "linux", goarch: "arm64"}
- {go: "1.20.7", goos: "freebsd", goarch: "386"}
- {go: "1.20.7", goos: "freebsd", goarch: "amd64"}
- {go: "1.20.7", goos: "windows", goarch: "386"}
- {go: "1.20.7", goos: "windows", goarch: "amd64"}
- {go: "1.20.7", goos: "solaris", goarch: "amd64"}
- {go: "1.20.8", goos: "linux", goarch: "386"}
- {go: "1.20.8", goos: "linux", goarch: "amd64"}
- {go: "1.20.8", goos: "linux", goarch: "arm"}
- {go: "1.20.8", goos: "linux", goarch: "arm64"}
- {go: "1.20.8", goos: "freebsd", goarch: "386"}
- {go: "1.20.8", goos: "freebsd", goarch: "amd64"}
- {go: "1.20.8", goos: "windows", goarch: "386"}
- {go: "1.20.8", goos: "windows", goarch: "amd64"}
- {go: "1.20.8", goos: "solaris", goarch: "amd64"}
fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build
@ -182,7 +182,7 @@ jobs:
strategy:
matrix:
include:
- {go: "1.20.7", goos: "linux", goarch: "s390x"}
- {go: "1.20.8", goos: "linux", goarch: "s390x"}
fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build
@ -233,7 +233,7 @@ jobs:
matrix:
goos: [ darwin ]
goarch: [ "amd64", "arm64" ]
go: [ "1.20.7" ]
go: [ "1.20.8" ]
fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build

2
build-support/docker/Build-Go.dockerfile
View File

@ -1,7 +1,7 @@
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1
ARG GOLANG_VERSION=1.20.7
ARG GOLANG_VERSION=1.20.8
FROM golang:${GOLANG_VERSION}
WORKDIR /consul