From 00a815f0b7a3a9b08e0f445cb061506a4204fab7 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Fri, 4 Mar 2022 16:49:20 +0100 Subject: [PATCH] update to go 1.16.15 to address CVE-2022-24921 Addresses [CVE-2022-24921](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24921) go1.16.15 (released 2022-03-03) includes a security fix to the regexp/syntax package, as well as bug fixes to the compiler, runtime, the go command, and to the net package. See the Go 1.16.15 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.15+label%3ACherryPickApproved full diff: https://github.com/golang/go/compare/go1.16.14...go1.16.15 Signed-off-by: Sebastiaan van Stijn --- common.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common.mk b/common.mk index 3ff7ee3a2c..57dd1ffb31 100644 --- a/common.mk +++ b/common.mk @@ -16,7 +16,7 @@ BUILDTIME=$(shell date -u -d "@$${SOURCE_DATE_EPOCH:-$$(date +%s)}" --rfc-3339 n CHOWN:=docker run --rm -v $(CURDIR):/v -w /v alpine chown DEFAULT_PRODUCT_LICENSE:=Community Engine DOCKER_GITCOMMIT:=abcdefg -GO_VERSION:=1.16.14 +GO_VERSION:=1.16.15 PLATFORM=Docker Engine - Community SHELL:=/bin/bash VERSION?=0.0.1-dev