search

tianon / gosu

Simple Go-based setuid+setgid+setgroups+exec
Apache License 2.0
4.68k stars 312 forks source link

Update golang to 1.19.5/1.20 #123

Closed f-ld closed 1 year ago

f-ld commented 1 year ago

Gosu is built with golang 1.18 and version of latest release (1.16) installed in mysql:8.0.32 docker image from Oracle was golang 1.18.2:

bash-4.4# gosu --version
1.16 (go1.18.2 on linux/amd64; gc)

But there are some CVEs reported in versions prior to 1.18.6 and 1.19.1:

So we should update the golang version to 1.18.6+ or 1.19.1+ (latest is 1.19.5, 1.20 is released too) and release a new version.

tianon commented 1 year ago

Please read https://github.com/tianon/gosu/blob/master/SECURITY.md

f-ld commented 1 year ago

Arghh, sorry I missed that.