Skip to content

[release/1.6] update to go1.19.12#8905

Merged
mxpv merged 1 commit intocontainerd:release/1.6from
thaJeztah:1.6_update_go1.19.12
Aug 2, 2023
Merged

[release/1.6] update to go1.19.12#8905
mxpv merged 1 commit intocontainerd:release/1.6from
thaJeztah:1.6_update_go1.19.12

Conversation

@thaJeztah
Copy link
Copy Markdown
Member

@thaJeztah thaJeztah commented Aug 1, 2023

Includes a fix for CVE-2023-29409

go1.19.12 (released 2023-08-01) includes a security fix to the crypto/tls package, as well as bug fixes to the assembler and the compiler. See the Go 1.19.12 milestone on our issue tracker for details.

From the mailing list announcement:

[security] Go 1.20.7 and Go 1.19.12 are released

Hello gophers,

We have just released Go versions 1.20.7 and 1.19.12, minor point releases.

These minor releases include 1 security fixes following the security policy:

  • crypto/tls: restrict RSA keys in certificates to <= 8192 bits

    Extremely large RSA keys in certificate chains can cause a client/server
    to expend significant CPU time verifying signatures. Limit this by
    restricting the size of RSA keys transmitted during handshakes to <=
    8192 bits.

    Based on a survey of publicly trusted RSA keys, there are currently only
    three certificates in circulation with keys larger than this, and all
    three appear to be test certificates that are not actively deployed. It
    is possible there are larger keys in use in private PKIs, but we target
    the web PKI, so causing breakage here in the interests of increasing the
    default safety of users of crypto/tls seems reasonable.

    Thanks to Mateusz Poliwczak for reporting this issue.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.20.7

@thaJeztah
update to go1.19.12
00d1092 
Includes a fix for CVE-2023-29409

go1.19.12 (released 2023-08-01) includes a security fix to the crypto/tls
package, as well as bug fixes to the assembler and the compiler. See the
Go 1.19.12 milestone on our issue tracker for details.

- https://github.com/golang/go/issues?q=milestone%3AGo1.19.12+label%3ACherryPickApproved
- full diff: golang/go@go1.19.11...go1.19.12

From the mailing list announcement:

[security] Go 1.20.7 and Go 1.19.12 are released

Hello gophers,

We have just released Go versions 1.20.7 and 1.19.12, minor point releases.

These minor releases include 1 security fixes following the security policy:

- crypto/tls: restrict RSA keys in certificates to <= 8192 bits

  Extremely large RSA keys in certificate chains can cause a client/server
  to expend significant CPU time verifying signatures. Limit this by
  restricting the size of RSA keys transmitted during handshakes to <=
  8192 bits.

  Based on a survey of publicly trusted RSA keys, there are currently only
  three certificates in circulation with keys larger than this, and all
  three appear to be test certificates that are not actively deployed. It
  is possible there are larger keys in use in private PKIs, but we target
  the web PKI, so causing breakage here in the interests of increasing the
  default safety of users of crypto/tls seems reasonable.

  Thanks to Mateusz Poliwczak for reporting this issue.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.20.7

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@mxpv mxpv merged commit de5e262 into containerd:release/1.6 Aug 2, 2023
@thaJeztah thaJeztah deleted the 1.6_update_go1.19.12 branch August 2, 2023 20:33
@kiashok kiashok mentioned this pull request Aug 9, 2023
Merged
aravindhp added a commit to openshift/containerd that referenced this pull request Aug 21, 2023
@aravindhp
Merge tag 'v1.6.23' into release-4.12
1a347cc 
containerd 1.6.23

Welcome to the v1.6.23 release of containerd!

The twenty-third patch release for containerd 1.6 contains various fixes and updates.

* **Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
* **cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
* **Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
* **update to go1.19.12 ([containerd#8905](containerd#8905))
* **backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

* Kirtana Ashok
* Maksym Pavlenko
* Austin Vazquez
* Ben Foster
* Derek McGowan
* Mike Brown
* Phil Estes
* Rodrigo Campos
* Sebastiaan van Stijn
* Wei Fu

<details><summary>13 commits</summary>
<p>

* [release/1.6] Add release notes for v1.6.23 ([containerd#8939](containerd#8939))
  * [`e297a668f`](containerd@e297a66) Add release notes for v1.6.23
* [release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
  * [`f51bf1960`](containerd@f51bf19) Add support for stable ABI windows versions
  * [`43a02c0b2`](containerd@43a02c0) Update hcsshim tag to v0.9.10
*  [release/1.6] cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
  * [`cc5b0a21b`](containerd@cc5b0a2) cri: Don't use rel path for image volumes
* [release/1.6 backport] Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
  * [`4238cff1c`](containerd@4238cff) Upgrade GitHub actions packages in release workflow
* [release/1.6] update to go1.19.12 ([containerd#8905](containerd#8905))
  * [`00d1092b7`](containerd@00d1092) update to go1.19.12
* [release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))
  * [`47d73b2de`](containerd@47d73b2) Fix ro mount option being passed
</p>
</details>

* **github.com/Microsoft/hcsshim**  v0.9.8 -> v0.9.10

Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22)
aravindhp added a commit to openshift/containerd that referenced this pull request Aug 21, 2023
@aravindhp
Merge tag 'v1.6.23' into release-4.13
be7d468 
containerd 1.6.23

Welcome to the v1.6.23 release of containerd!

The twenty-third patch release for containerd 1.6 contains various fixes and updates.

* **Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
* **cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
* **Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
* **update to go1.19.12 ([containerd#8905](containerd#8905))
* **backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

* Kirtana Ashok
* Maksym Pavlenko
* Austin Vazquez
* Ben Foster
* Derek McGowan
* Mike Brown
* Phil Estes
* Rodrigo Campos
* Sebastiaan van Stijn
* Wei Fu

<details><summary>13 commits</summary>
<p>

* [release/1.6] Add release notes for v1.6.23 ([containerd#8939](containerd#8939))
  * [`e297a668f`](containerd@e297a66) Add release notes for v1.6.23
* [release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
  * [`f51bf1960`](containerd@f51bf19) Add support for stable ABI windows versions
  * [`43a02c0b2`](containerd@43a02c0) Update hcsshim tag to v0.9.10
*  [release/1.6] cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
  * [`cc5b0a21b`](containerd@cc5b0a2) cri: Don't use rel path for image volumes
* [release/1.6 backport] Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
  * [`4238cff1c`](containerd@4238cff) Upgrade GitHub actions packages in release workflow
* [release/1.6] update to go1.19.12 ([containerd#8905](containerd#8905))
  * [`00d1092b7`](containerd@00d1092) update to go1.19.12
* [release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))
  * [`47d73b2de`](containerd@47d73b2) Fix ro mount option being passed
</p>
</details>

* **github.com/Microsoft/hcsshim**  v0.9.8 -> v0.9.10

Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22)
aravindhp added a commit to openshift/containerd that referenced this pull request Aug 21, 2023
@aravindhp
Merge tag 'v1.6.23' into release-4.11
6dbd1da 
containerd 1.6.23

Welcome to the v1.6.23 release of containerd!

The twenty-third patch release for containerd 1.6 contains various fixes and updates.

* **Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
* **cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
* **Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
* **update to go1.19.12 ([containerd#8905](containerd#8905))
* **backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

* Kirtana Ashok
* Maksym Pavlenko
* Austin Vazquez
* Ben Foster
* Derek McGowan
* Mike Brown
* Phil Estes
* Rodrigo Campos
* Sebastiaan van Stijn
* Wei Fu

<details><summary>13 commits</summary>
<p>

* [release/1.6] Add release notes for v1.6.23 ([containerd#8939](containerd#8939))
  * [`e297a668f`](containerd@e297a66) Add release notes for v1.6.23
* [release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([containerd#8854](containerd#8854))
  * [`f51bf1960`](containerd@f51bf19) Add support for stable ABI windows versions
  * [`43a02c0b2`](containerd@43a02c0) Update hcsshim tag to v0.9.10
*  [release/1.6] cri: Don't use rel path for image volumes ([containerd#8927](containerd#8927))
  * [`cc5b0a21b`](containerd@cc5b0a2) cri: Don't use rel path for image volumes
* [release/1.6 backport] Upgrade GitHub actions packages in release workflow ([containerd#8908](containerd#8908))
  * [`4238cff1c`](containerd@4238cff) Upgrade GitHub actions packages in release workflow
* [release/1.6] update to go1.19.12 ([containerd#8905](containerd#8905))
  * [`00d1092b7`](containerd@00d1092) update to go1.19.12
* [release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([containerd#8888](containerd#8888))
  * [`47d73b2de`](containerd@47d73b2) Fix ro mount option being passed
</p>
</details>

* **github.com/Microsoft/hcsshim**  v0.9.8 -> v0.9.10

Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mxpv mxpv mxpv approved these changes

@estesp estesp estesp approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@thaJeztah @mxpv @estesp