Update Go to 1.17.3

go1.17.3 (released 2021-11-04) includes security fixes to the archive/zip and
debug/macho packages, as well as bug fixes to the compiler, linker, runtime, the
go command, the misc/wasm directory, and to the net/http and syscall packages.
See the Go 1.17.3 milestone on our issue tracker for details.

From the announcement e-mail:

[security] Go 1.17.3 and Go 1.16.10 are released

We have just released Go versions 1.17.3 and 1.16.10, minor point releases.
These minor releases include two security fixes following the security policy:

- archive/zip: don't panic on (*Reader).Open
  Reader.Open (the API implementing io/fs.FS introduced in Go 1.16) can be made
  to panic by an attacker providing either a crafted ZIP archive containing
  completely invalid names or an empty filename argument.
  Thank you to Colin Arnott, SiteHost and Noah Santschi-Cooney, Sourcegraph Code
  Intelligence Team for reporting this issue. This is CVE-2021-41772 and Go issue
  golang.org/issue/48085.
- debug/macho: invalid dynamic symbol table command can cause panic
  Malformed binaries parsed using Open or OpenFat can cause a panic when calling
  ImportedSymbols, due to an out-of-bounds slice operation.
  Thanks to Burak Çarıkçı - Yunus Yıldırım (CT-Zer0 Crypttech) for reporting this
  issue. This is CVE-2021-41771 and Go issue golang.org/issue/48990.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
This commit is contained in:
Sebastiaan van Stijn 2021-11-05 12:45:14 +01:00
parent d418660889
commit 869ccc01c1
No known key found for this signature in database
GPG Key ID: 76698F39D527CE8C
10 changed files with 19 additions and 19 deletions

View File

@ -20,7 +20,7 @@ jobs:
strategy:
matrix:
go-version: [1.17.2]
go-version: [1.17.3]
os: [ubuntu-18.04, macos-10.15, windows-2019]
steps:
@ -46,7 +46,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:
@ -78,7 +78,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:
@ -111,7 +111,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
- run: go get github.com/cpuguy83/go-md2man/v2@v2.0.1
- run: make man
@ -145,7 +145,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
- run: |
set -e -x
@ -202,7 +202,7 @@ jobs:
strategy:
matrix:
os: [ubuntu-18.04, macos-10.15, windows-2019]
go-version: ['1.17.2']
go-version: ['1.17.3']
steps:
- uses: actions/setup-go@v2
@ -244,7 +244,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:
@ -325,7 +325,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
@ -444,7 +444,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
- run: sudo -E PATH=$PATH script/setup/install-gotestsum
- name: Tests

View File

@ -24,7 +24,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:

View File

@ -18,7 +18,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:
@ -135,7 +135,7 @@ jobs:
steps:
- uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- uses: actions/checkout@v2
with:

View File

@ -62,7 +62,7 @@ jobs:
- name: Install Go
uses: actions/setup-go@v2
with:
go-version: '1.17.2'
go-version: '1.17.3'
- name: Set env
shell: bash

View File

@ -2,7 +2,7 @@
become: yes
roles:
- role: config-golang
go_version: '1.17.2'
go_version: '1.17.3'
arch: arm64
tasks:
- name: Install pre-requisites

View File

@ -2,7 +2,7 @@
become: yes
roles:
- role: config-golang
go_version: '1.17.2'
go_version: '1.17.3'
arch: arm64
tasks:
- name: Build containerd

View File

@ -2,7 +2,7 @@
become: yes
roles:
- role: config-golang
go_version: '1.17.2'
go_version: '1.17.3'
arch: arm64
tasks:
- name: Build and test containerd

2
Vagrantfile vendored
View File

@ -77,7 +77,7 @@ Vagrant.configure("2") do |config|
config.vm.provision "install-golang", type: "shell", run: "once" do |sh|
sh.upload_path = "/tmp/vagrant-install-golang"
sh.env = {
'GO_VERSION': ENV['GO_VERSION'] || "1.17.2",
'GO_VERSION': ENV['GO_VERSION'] || "1.17.3",
}
sh.inline = <<~SHELL
#!/usr/bin/env bash

View File

@ -10,7 +10,7 @@
#
# docker build -t containerd-test --build-arg RUNC_VERSION=v1.0.0-rc94 -f Dockerfile.test ../
ARG GOLANG_VERSION=1.17.2
ARG GOLANG_VERSION=1.17.3
ARG GOLANG_IMAGE=golang
FROM ${GOLANG_IMAGE}:${GOLANG_VERSION} AS golang

View File

@ -1,6 +1,6 @@
# Prepare windows environment for building and running containerd tests
$PACKAGES= @{ mingw = "10.2.0"; git = ""; golang = "1.17.2"; make = ""; nssm = "" }
$PACKAGES= @{ mingw = "10.2.0"; git = ""; golang = "1.17.3"; make = ""; nssm = "" }
write-host "Downloading chocolatey package"
curl.exe -L "https://packages.chocolatey.org/chocolatey.0.10.15.nupkg" -o 'c:\choco.zip'