Skip to content

Commit 7b20299

Browse files
committed
[release/1.5] update Go to 1.16.10
go1.16.10 (released 2021-11-04) includes security fixes to the archive/zip and debug/macho packages, as well as bug fixes to the compiler, linker, runtime, the misc/wasm directory, and to the net/http package. See the Go 1.16.10 milestone for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.10+label%3ACherryPickApproved From the announcement e-mail: [security] Go 1.17.3 and Go 1.16.10 are released We have just released Go versions 1.17.3 and 1.16.10, minor point releases. These minor releases include two security fixes following the security policy: - archive/zip: don't panic on (*Reader).Open Reader.Open (the API implementing io/fs.FS introduced in Go 1.16) can be made to panic by an attacker providing either a crafted ZIP archive containing completely invalid names or an empty filename argument. Thank you to Colin Arnott, SiteHost and Noah Santschi-Cooney, Sourcegraph Code Intelligence Team for reporting this issue. This is CVE-2021-41772 and Go issue golang.org/issue/48085. - debug/macho: invalid dynamic symbol table command can cause panic Malformed binaries parsed using Open or OpenFat can cause a panic when calling ImportedSymbols, due to an out-of-bounds slice operation. Thanks to Burak Çarıkçı - Yunus Yıldırım (CT-Zer0 Crypttech) for reporting this issue. This is CVE-2021-41771 and Go issue golang.org/issue/48990. Signed-off-by: Sebastiaan van Stijn <[email protected]>
1 parent 641976b commit 7b20299

8 files changed

Lines changed: 17 additions & 17 deletions

File tree

.github/workflows/ci.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
strategy:
2222
matrix:
23-
go-version: [1.16.9]
23+
go-version: [1.16.10]
2424
os: [ubuntu-18.04, macos-10.15, windows-2019]
2525

2626
steps:
@@ -51,7 +51,7 @@ jobs:
5151
steps:
5252
- uses: actions/setup-go@v2
5353
with:
54-
go-version: '1.16.9'
54+
go-version: '1.16.10'
5555

5656
- shell: bash
5757
run: |
@@ -82,7 +82,7 @@ jobs:
8282
steps:
8383
- uses: actions/setup-go@v2
8484
with:
85-
go-version: '1.16.9'
85+
go-version: '1.16.10'
8686

8787
- uses: actions/checkout@v2
8888
with:
@@ -115,7 +115,7 @@ jobs:
115115
steps:
116116
- uses: actions/setup-go@v2
117117
with:
118-
go-version: '1.16.9'
118+
go-version: '1.16.10'
119119

120120
- name: Set env
121121
shell: bash
@@ -161,7 +161,7 @@ jobs:
161161
steps:
162162
- uses: actions/setup-go@v2
163163
with:
164-
go-version: '1.16.9'
164+
go-version: '1.16.10'
165165
- name: Set env
166166
shell: bash
167167
run: |
@@ -226,7 +226,7 @@ jobs:
226226
strategy:
227227
matrix:
228228
os: [ubuntu-18.04, macos-10.15, windows-2019]
229-
go-version: ['1.16.9']
229+
go-version: ['1.16.10']
230230
include:
231231
# Go 1.13.x is still used by Docker/Moby
232232
- go-version: '1.13.x'
@@ -272,7 +272,7 @@ jobs:
272272
steps:
273273
- uses: actions/setup-go@v2
274274
with:
275-
go-version: '1.16.9'
275+
go-version: '1.16.10'
276276

277277
- uses: actions/checkout@v2
278278
with:
@@ -353,7 +353,7 @@ jobs:
353353
steps:
354354
- uses: actions/setup-go@v2
355355
with:
356-
go-version: '1.16.9'
356+
go-version: '1.16.10'
357357

358358
- uses: actions/checkout@v2
359359
with:
@@ -505,7 +505,7 @@ jobs:
505505
steps:
506506
- uses: actions/setup-go@v2
507507
with:
508-
go-version: '1.16.9'
508+
go-version: '1.16.10'
509509
- uses: actions/checkout@v2
510510
with:
511511
path: src/github.com/containerd/containerd

.github/workflows/nightly.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
steps:
1919
- uses: actions/setup-go@v2
2020
with:
21-
go-version: '1.16.9'
21+
go-version: '1.16.10'
2222

2323
- uses: actions/checkout@v2
2424
with:
@@ -135,7 +135,7 @@ jobs:
135135
steps:
136136
- uses: actions/setup-go@v2
137137
with:
138-
go-version: '1.16.9'
138+
go-version: '1.16.10'
139139

140140
- uses: actions/checkout@v2
141141
with:

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
- name: Install Go
6363
uses: actions/setup-go@v2
6464
with:
65-
go-version: '1.16.9'
65+
go-version: '1.16.10'
6666

6767
- name: Set env
6868
shell: bash

.zuul/playbooks/containerd-build/integration-test.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
become: yes
33
roles:
44
- role: config-golang
5-
go_version: '1.16.9'
5+
go_version: '1.16.10'
66
arch: arm64
77
tasks:
88
- name: Install pre-requisites

.zuul/playbooks/containerd-build/run.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
become: yes
33
roles:
44
- role: config-golang
5-
go_version: '1.16.9'
5+
go_version: '1.16.10'
66
arch: arm64
77
tasks:
88
- name: Build containerd

.zuul/playbooks/containerd-build/unit-test.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
become: yes
33
roles:
44
- role: config-golang
5-
go_version: '1.16.9'
5+
go_version: '1.16.10'
66
arch: arm64
77
tasks:
88
- name: Build and test containerd

Vagrantfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ Vagrant.configure("2") do |config|
7777
config.vm.provision "install-golang", type: "shell", run: "once" do |sh|
7878
sh.upload_path = "/tmp/vagrant-install-golang"
7979
sh.env = {
80-
'GO_VERSION': ENV['GO_VERSION'] || "1.16.9",
80+
'GO_VERSION': ENV['GO_VERSION'] || "1.16.10",
8181
}
8282
sh.inline = <<~SHELL
8383
#!/usr/bin/env bash

contrib/Dockerfile.test

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
#
1111
# docker build -t containerd-test --build-arg RUNC_VERSION=v1.0.0-rc93 -f Dockerfile.test ../
1212

13-
ARG GOLANG_VERSION=1.16.9
13+
ARG GOLANG_VERSION=1.16.10
1414

1515
FROM golang:${GOLANG_VERSION} AS golang-base
1616
RUN mkdir -p /go/src/github.com/containerd/containerd

0 commit comments

Comments
 (0)