search

openconfig / gnmic

gNMIc is a gNMI CLI client and collector
https://gnmic.openconfig.net
Apache License 2.0
168 stars 54 forks source link

upgrade golang to 1.21.9 #420

Closed karimra closed 4 months ago

karimra commented 4 months ago

This PR upgrades golang version to 1.21.9 as well as some packages to fix a few vulnerabilities:

CVE-2023-45285 CVE-2023-44487 CVE-2023-39325

vincentbernat commented 3 months ago

Updating go version in go.mod makes it impossible to compile on some distributions despite Go being up-to-date (including security updates). For example, on Ubuntu Jammy (1.21.1 + security patches):

go: github.com/openconfig/gnmic/pkg/api@v0.1.6 requires go >= 1.21.9 (running go 1.21.1)

This change also impacts programs using gnmic as a dependency. As an alternative, you could bump the toolchain version instead.