1. docker
  2. Commit 57b7ffa7f6543709094bab097b8a9bf42700e03e
Browse code

update to go1.21.8

go1.21.8 (released 2024-03-05) includes 5 security fixes

- crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783, https://go.dev/issue/65390)
- net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290, https://go.dev/issue/65383)
- net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289, https://go.dev/issue/65065)
- html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785, https://go.dev/issue/65697)
- net/mail: comments in display names are incorrectly handled (CVE-2024-24784, https://go.dev/issue/65083)

View the release notes for more information:
https://go.dev/doc/devel/release#go1.22.1

- https://github.com/golang/go/issues?q=milestone%3AGo1.21.8+label%3ACherryPickApproved
- full diff: https://github.com/golang/go/compare/go1.21.7...go1.21.8

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Paweł Gronowski authored on 2024/03/06 03:17:18
Showing 8 changed files
.github/workflows/.test.yml
History View file @ 57b7ffa
... ... 
@@ -12,7 +12,7 @@ on:
12 12 
         default: "graphdriver"
13 13
14 14 
 env:
15 
-  GO_VERSION: "1.21.7"
15 
+  GO_VERSION: "1.21.8"
16 16 
   GOTESTLIST_VERSION: v0.3.1
17 17 
   TESTSTAT_VERSION: v0.1.25
18 18 
   ITG_CLI_MATRIX_SIZE: 6
.github/workflows/.windows.yml
History View file @ 57b7ffa
... ... 
@@ -19,7 +19,7 @@ on:
19 19 
         default: false
20 20
21 21 
 env:
22 
-  GO_VERSION: "1.21.7"
22 
+  GO_VERSION: "1.21.8"
23 23 
   GOTESTLIST_VERSION: v0.3.1
24 24 
   TESTSTAT_VERSION: v0.1.25
25 25 
   WINDOWS_BASE_IMAGE: mcr.microsoft.com/windows/servercore
.github/workflows/buildkit.yml
History View file @ 57b7ffa
... ... 
@@ -13,7 +13,7 @@ on:
13 13 
   pull_request:
14 14
15 15 
 env:
16 
-  GO_VERSION: "1.21.7"
16 
+  GO_VERSION: "1.21.8"
17 17 
   DESTDIR: ./build
18 18
19 19 
 jobs:
.github/workflows/test.yml
History View file @ 57b7ffa
... ... 
@@ -13,7 +13,7 @@ on:
13 13 
   pull_request:
14 14
15 15 
 env:
16 
-  GO_VERSION: "1.21.7"
16 
+  GO_VERSION: "1.21.8"
17 17 
   GIT_PAGER: "cat"
18 18 
   PAGER: "cat"
19 19
Dockerfile
History View file @ 57b7ffa
... ... 
@@ -1,6 +1,6 @@
1 1 
 # syntax=docker/dockerfile:1
2 2
3 
-ARG GO_VERSION=1.21.7
3 
+ARG GO_VERSION=1.21.8
4 4 
 ARG BASE_DEBIAN_DISTRO="bookworm"
5 5 
 ARG GOLANG_IMAGE="golang:${GO_VERSION}-${BASE_DEBIAN_DISTRO}"
6 6 
 ARG XX_VERSION=1.2.1
Dockerfile.simple
History View file @ 57b7ffa
... ... 
@@ -5,7 +5,7 @@
5 5
6 6 
 # This represents the bare minimum required to build and test Docker.
7 7
8 
-ARG GO_VERSION=1.21.7
8 
+ARG GO_VERSION=1.21.8
9 9
10 10 
 ARG BASE_DEBIAN_DISTRO="bookworm"
11 11 
 ARG GOLANG_IMAGE="golang:${GO_VERSION}-${BASE_DEBIAN_DISTRO}"
Dockerfile.windows
History View file @ 57b7ffa
... ... 
@@ -161,7 +161,7 @@ FROM ${WINDOWS_BASE_IMAGE}:${WINDOWS_BASE_IMAGE_TAG}
161 161 
 # Use PowerShell as the default shell
162 162 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"]
163 163
164 
-ARG GO_VERSION=1.21.7
164 
+ARG GO_VERSION=1.21.8
165 165 
 ARG GOTESTSUM_VERSION=v1.8.2
166 166 
 ARG GOWINRES_VERSION=v0.3.1
167 167 
 ARG CONTAINERD_VERSION=v1.7.13
hack/dockerfiles/generate-files.Dockerfile
History View file @ 57b7ffa
... ... 
@@ -1,6 +1,6 @@
1 1 
 # syntax=docker/dockerfile:1
2 2
3 
-ARG GO_VERSION=1.21.7
3 
+ARG GO_VERSION=1.21.8
4 4 
 ARG BASE_DEBIAN_DISTRO="bookworm"
5 5 
 ARG PROTOC_VERSION=3.11.4
6 6