mirror of https://github.com/hashicorp/consul
Browse Source
Update Go version to 1.20.8 This resolves several CVEs (see changelog entry).pull/18766/head
Michael Zalimeni
1 year ago
committed by
GitHub
3 changed files with 20 additions and 12 deletions
@ -0,0 +1,8 @@ |
|||||||
|
```release-note:security |
||||||
|
Upgrade to use Go 1.20.8. This resolves CVEs |
||||||
|
[CVE-2023-39320](https://github.com/advisories/GHSA-rxv8-v965-v333) (`cmd/go`), |
||||||
|
[CVE-2023-39318](https://github.com/advisories/GHSA-vq7j-gx56-rxjh) (`html/template`), |
||||||
|
[CVE-2023-39319](https://github.com/advisories/GHSA-vv9m-32rr-3g55) (`html/template`), |
||||||
|
[CVE-2023-39321](https://github.com/advisories/GHSA-9v7r-x7cv-v437) (`crypto/tls`), and |
||||||
|
[CVE-2023-39322](https://github.com/advisories/GHSA-892h-r6cr-53g4) (`crypto/tls`) |
||||||
|
``` |
@ -1,7 +1,7 @@ |
|||||||
# Copyright (c) HashiCorp, Inc. |
# Copyright (c) HashiCorp, Inc. |
||||||
# SPDX-License-Identifier: BUSL-1.1 |
# SPDX-License-Identifier: BUSL-1.1 |
||||||
|
|
||||||
ARG GOLANG_VERSION=1.20.7 |
ARG GOLANG_VERSION=1.20.8 |
||||||
FROM golang:${GOLANG_VERSION} |
FROM golang:${GOLANG_VERSION} |
||||||
|
|
||||||
WORKDIR /consul |
WORKDIR /consul |
||||||
|
Loading…
Reference in new issue