diff options
| author | Sebastiaan van Stijn <github@gone.nl> | 2022-08-03 20:06:35 +0200 |
|---|---|---|
| committer | Sebastiaan van Stijn <github@gone.nl> | 2022-08-03 20:08:21 +0200 |
| commit | f1d71f7cc3e5a394db078526dcffbdb64f0cac4e (patch) | |
| tree | 3828c7d652fff8c20ecec8cdb3a8d8d957d49475 | |
| parent | 9100e3c087216343e4149887d43f1e7ae272968a (diff) | |
| download | docker-f1d71f7cc3e5a394db078526dcffbdb64f0cac4e.tar.gz | |
Update golang to 1.18.5
Update Go runtime to 1.18.5 to address CVE-2022-32189.
Full diff: https://github.com/golang/go/compare/go1.18.4...go1.18.5
--------------------------------------------------------
From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10
We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.
These minor releases include 1 security fixes following the security
policy:
encoding/gob & math/big: decoding big.Float and big.Rat can panic
Decoding big.Float and big.Rat types can panic if the encoded message is
too short.
This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.
View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
| -rw-r--r-- | .github/workflows/windows.yml | 2 | ||||
| -rw-r--r-- | Dockerfile | 2 | ||||
| -rw-r--r-- | Dockerfile.e2e | 2 | ||||
| -rw-r--r-- | Dockerfile.simple | 2 | ||||
| -rw-r--r-- | Dockerfile.windows | 2 |
5 files changed, 5 insertions, 5 deletions
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 075003bcd2..6d6fee241a 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -15,7 +15,7 @@ on: pull_request: env: - GO_VERSION: 1.18.4 + GO_VERSION: 1.18.5 GOTESTLIST_VERSION: v0.2.0 TESTSTAT_VERSION: v0.1.3 WINDOWS_BASE_IMAGE: mcr.microsoft.com/windows/servercore diff --git a/Dockerfile b/Dockerfile index 4085767e96..9bb4ba4d66 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,7 +2,7 @@ ARG CROSS="false" ARG SYSTEMD="false" -ARG GO_VERSION=1.18.4 +ARG GO_VERSION=1.18.5 ARG DEBIAN_FRONTEND=noninteractive ARG VPNKIT_VERSION=0.5.0 diff --git a/Dockerfile.e2e b/Dockerfile.e2e index 7f64cc5caf..562c5d5a60 100644 --- a/Dockerfile.e2e +++ b/Dockerfile.e2e @@ -1,4 +1,4 @@ -ARG GO_VERSION=1.18.4 +ARG GO_VERSION=1.18.5 FROM golang:${GO_VERSION}-alpine AS base ENV GO111MODULE=off diff --git a/Dockerfile.simple b/Dockerfile.simple index 782bb8143f..29397631ef 100644 --- a/Dockerfile.simple +++ b/Dockerfile.simple @@ -5,7 +5,7 @@ # This represents the bare minimum required to build and test Docker. -ARG GO_VERSION=1.18.4 +ARG GO_VERSION=1.18.5 ARG BASE_DEBIAN_DISTRO="bullseye" ARG GOLANG_IMAGE="golang:${GO_VERSION}-${BASE_DEBIAN_DISTRO}" diff --git a/Dockerfile.windows b/Dockerfile.windows index 6a292b7ce7..c75a504653 100644 --- a/Dockerfile.windows +++ b/Dockerfile.windows @@ -165,7 +165,7 @@ FROM microsoft/windowsservercore # Use PowerShell as the default shell SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"] -ARG GO_VERSION=1.18.4 +ARG GO_VERSION=1.18.5 ARG CONTAINERD_VERSION=v1.6.6 ARG GOTESTSUM_VERSION=v1.8.1 ARG GOWINRES_VERSION=v0.2.3 |