From a628a336124f39d305ee8c6d478ff0d65db458ef Mon Sep 17 00:00:00 2001 From: hc-github-team-consul-core Date: Tue, 12 Sep 2023 11:17:28 -0500 Subject: [PATCH] Backport of [NET-5574] Update Go version to 1.20.8 into release/1.1.x (#2948) backport of commit 63b158c54ef9f1e657bd03df2731738b8fe0b2a4 Co-authored-by: Michael Zalimeni --- .changelog/2936.txt | 8 ++++++++ .go-version | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) create mode 100644 .changelog/2936.txt diff --git a/.changelog/2936.txt b/.changelog/2936.txt new file mode 100644 index 0000000000..923f9383f4 --- /dev/null +++ b/.changelog/2936.txt @@ -0,0 +1,8 @@ +```release-note:security +Upgrade to use Go 1.20.8. This resolves CVEs +[CVE-2023-39320](https://github.com/advisories/GHSA-rxv8-v965-v333) (`cmd/go`), +[CVE-2023-39318](https://github.com/advisories/GHSA-vq7j-gx56-rxjh) (`html/template`), +[CVE-2023-39319](https://github.com/advisories/GHSA-vv9m-32rr-3g55) (`html/template`), +[CVE-2023-39321](https://github.com/advisories/GHSA-9v7r-x7cv-v437) (`crypto/tls`), and +[CVE-2023-39322](https://github.com/advisories/GHSA-892h-r6cr-53g4) (`crypto/tls`) +``` diff --git a/.go-version b/.go-version index 8909929f6e..95393fc7d4 100644 --- a/.go-version +++ b/.go-version @@ -1 +1 @@ -1.20.7 +1.20.8