Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go to 1.22.3 to fix CVE-2024-24788 #751

Merged

Conversation

jiangpengcheng
Copy link
Member

@jiangpengcheng jiangpengcheng commented May 11, 2024

Motivation

Resolves build CVE by updating Golang to 1.22.3, resolving CVE-2024-24788

Modifications

Updating build and golang defniitions.

Verifying this change

  • Make sure that the change passes the CI checks.

This change is already covered by existing tests

Documentation

Need to update docs?

  • no-need-doc

This is modifying internals to the build.

@jiangpengcheng jiangpengcheng requested review from nlu90, freeznet and a team as code owners May 11, 2024 02:56
@github-actions github-actions bot added the no-need-doc This pr does not need any document label May 11, 2024
@illegalnumbers illegalnumbers merged commit 5d18c1c into streamnative:master May 13, 2024
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
m/2024-04 no-need-doc This pr does not need any document
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants