Create a new release built with go1.20.5

containernetworking / plugins

Some reference and example networking plugins, maintained by the CNI team.

Apache License 2.0

2.21k stars 784 forks source link

Create a new release built with go1.20.5 #915

Closed jingyuanliang closed 1 year ago

jingyuanliang commented 1 year ago

The current binaries were built with go 1.20.4 and have:

https://nvd.nist.gov/vuln/detail/CVE-2023-29404
https://nvd.nist.gov/vuln/detail/CVE-2023-29405
https://nvd.nist.gov/vuln/detail/CVE-2023-29403
https://nvd.nist.gov/vuln/detail/CVE-2023-29402

squeed commented 1 year ago

We will cut a release soon enough, but none of these CVEs affect the CNI plugins at all. Three of them are for the go binary itself, and one of them is for setuid binaries, which the CNI plugins are not.