Skip to content

Commit 19d678f

Browse files
thaJeztahthaJeztah
committed
update to go1.22.7, go1.23.1
- https://github.com/golang/go/issues?q=milestone%3AGo1.27.7+label%3ACherryPickApproved - full diff: golang/go@go1.22.6...go1.22.7 These minor releases include 3 security fixes following the security policy: - go/parser: stack exhaustion in all Parse* functions Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. This is CVE-2024-34155 and Go issue https://go.dev/issue/69138. - encoding/gob: stack exhaustion in Decoder.Decode Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. Thanks to Md Sakib Anwar of The Ohio State University for reporting this issue. This is CVE-2024-34156 and Go issue https://go.dev/issue/69139. - go/build/constraint: stack exhaustion in Parse Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. This is CVE-2024-34158 and Go issue https://go.dev/issue/69141. View the release notes for more information: https://go.dev/doc/devel/release#go1.22.7 Signed-off-by: Sebastiaan van Stijn <[email protected]>
1 parent eb52ab6 commit 19d678f

8 files changed

Lines changed: 9 additions & 9 deletions

File tree

‎.github/actions/install-go/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ description: "Reusable action to install Go, so there is one place to bump Go ve
33
inputs:
44
go-version:
55
required: true
6-
default: "1.22.6"
6+
default: "1.22.7"
77
description: "Go version to install"
88

99
runs:

‎.github/workflows/api-release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ on:
66
name: API Release
77

88
env:
9-
GO_VERSION: "1.22.6"
9+
GO_VERSION: "1.22.7"
1010

1111
permissions: # added using https://github.com/step-security/secure-workflows
1212
contents: read

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -192,7 +192,7 @@ jobs:
192192
strategy:
193193
matrix:
194194
os: [ubuntu-20.04, actuated-arm64-4cpu-16gb, macos-12, windows-2019, windows-2022]
195-
go-version: ["1.22.6", "1.23.0"]
195+
go-version: ["1.22.7", "1.23.1"]
196196
steps:
197197
- uses: actions/checkout@v4
198198
- uses: ./.github/actions/install-go

‎.github/workflows/release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ on:
1313
name: Release
1414

1515
env:
16-
GO_VERSION: "1.22.6"
16+
GO_VERSION: "1.22.7"
1717

1818
permissions: # added using https://github.com/step-security/secure-workflows
1919
contents: read

‎Vagrantfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@ EOF
104104
config.vm.provision "install-golang", type: "shell", run: "once" do |sh|
105105
sh.upload_path = "/tmp/vagrant-install-golang"
106106
sh.env = {
107-
'GO_VERSION': ENV['GO_VERSION'] || "1.22.6",
107+
'GO_VERSION': ENV['GO_VERSION'] || "1.22.7",
108108
}
109109
sh.inline = <<~SHELL
110110
#!/usr/bin/env bash

‎contrib/Dockerfile.test‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
# docker run --privileged containerd-test
3030
# ------------------------------------------------------------------------------
3131

32-
ARG GOLANG_VERSION=1.22.6
32+
ARG GOLANG_VERSION=1.22.7
3333
ARG GOLANG_IMAGE=golang
3434

3535
FROM ${GOLANG_IMAGE}:${GOLANG_VERSION} AS golang

‎contrib/fuzz/oss_fuzz_build.sh‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ go run main.go --target_dir $SRC/containerd/images
4343

4444
apt-get update && apt-get install -y wget
4545
cd $SRC
46-
wget --quiet https://go.dev/dl/go1.22.6.linux-amd64.tar.gz
46+
wget --quiet https://go.dev/dl/go1.22.7.linux-amd64.tar.gz
4747

4848
mkdir temp-go
4949
rm -rf /root/.go/*
50-
tar -C temp-go/ -xzf go1.22.6.linux-amd64.tar.gz
50+
tar -C temp-go/ -xzf go1.22.7.linux-amd64.tar.gz
5151
mv temp-go/go/* /root/.go/
5252
cd $SRC/containerd
5353

‎script/setup/prepare_env_windows.ps1‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
# lived test environment.
66
Set-MpPreference -DisableRealtimeMonitoring:$true
77

8-
$PACKAGES= @{ mingw = "10.2.0"; git = ""; golang = "1.22.6"; make = ""; nssm = "" }
8+
$PACKAGES= @{ mingw = "10.2.0"; git = ""; golang = "1.22.7"; make = ""; nssm = "" }
99

1010
Write-Host "Downloading chocolatey package"
1111
curl.exe -L "https://packages.chocolatey.org/chocolatey.0.10.15.nupkg" -o 'c:\choco.zip'

0 commit comments

Comments
 (0)