Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport of [NET-5574] Update Go version to 1.20.8 into release/1.16.x #18763

Merged
merged 1 commit into from
Sep 12, 2023
Merged

Backport of [NET-5574] Update Go version to 1.20.8 into release/1.16.x #18763

merged 1 commit into from
Sep 12, 2023

Conversation

hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #18742 to be assessed for backporting due to the inclusion of the label backport/1.16.

The below text is copied from the body of the original PR.

This resolves several CVEs:

  • CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary execution
  • CVE-2023-39318: html/template: improper handling of HTML-like comments within script contexts
  • CVE-2023-39319: html/template: improper handling of special tags within script contexts
  • CVE-2023-39321 and CVE-2023-39322: crypto/tls: panic when processing post-handshake message on QUIC connections

Description

Resolves CVEs and brings us up to the latest version of Go.

Testing & Reproduction steps

Tests should continue to pass.

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern
Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core removed the request for review from a team September 12, 2023 15:41
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/zalimeni/net-5574-bump-go-1.20.8/amazingly-smooth-shark branch from 2f05dbd to f7b1947 Compare September 12, 2023 15:41
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/zalimeni/net-5574-bump-go-1.20.8/amazingly-smooth-shark branch from 9c183b2 to ed28f11 Compare September 12, 2023 15:41
@github-actions github-actions bot added type/ci Relating to continuous integration (CI) tooling for testing or releases theme/contributing Additions and enhancements to community contributing materials labels Sep 12, 2023
github-team-consul-core-pr-approver
github-team-consul-core-pr-approver approved these changes Sep 12, 2023
View reviewed changes
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@vercel vercel bot temporarily deployed to Preview – consul September 12, 2023 15:46 Inactive
@hc-github-team-consul-core hc-github-team-consul-core merged commit 48ddc39 into release/1.16.x Sep 12, 2023
84 of 85 checks passed
@hc-github-team-consul-core hc-github-team-consul-core deleted the backport/zalimeni/net-5574-bump-go-1.20.8/amazingly-smooth-shark branch September 12, 2023 15:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@github-team-consul-core-pr-approver github-team-consul-core-pr-approver github-team-consul-core-pr-approver approved these changes

@marianoasselborn marianoasselborn Awaiting requested review from marianoasselborn

@emilymianeil emilymianeil Awaiting requested review from emilymianeil

@zalimeni zalimeni Awaiting requested review from zalimeni

Assignees

@zalimeni zalimeni

Labels
theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@hc-github-team-consul-core @github-team-consul-core-pr-approver @zalimeni