Skip to content

Update golang to 1.18.5, 1.17.13#7243

Merged
mikebrow merged 1 commit intocontainerd:mainfrom
dcantah:update-go-main
Aug 2, 2022
Merged

Update golang to 1.18.5, 1.17.13#7243
mikebrow merged 1 commit intocontainerd:mainfrom
dcantah:update-go-main

Conversation

@dcantah
Copy link
Member

@dcantah dcantah commented Aug 2, 2022

Update Go runtime to 1.18.5 to address CVE-2022-32189.

Full diff:
golang/go@go1.18.4...go1.18.5


From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10

We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.

These minor releases include 1 security fixes following the security
policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is
too short.

This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5

Update Go runtime to 1.18.5 to address CVE-2022-32189.

Full diff:
golang/go@go1.18.4...go1.18.5

--------------------------------------------------------

From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10

We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.

These minor releases include 1 security fixes following the security
policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is
too short.

This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5

Signed-off-by: Daniel Canter <dcanter@microsoft.com>
Copy link
Member

@thaJeztah thaJeztah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

Copy link
Contributor

@Zyqsempai Zyqsempai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@estesp estesp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@mikebrow mikebrow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mikebrow mikebrow merged commit 1e6523f into containerd:main Aug 2, 2022
vvejell1 pushed a commit to vvejell1/containerd that referenced this pull request Oct 13, 2022
Update golang to 1.18.5, 1.17.13

Signed-off-by: Vaishnavi Vejella <vvejella@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants