From d1014916fe9a27edcbc67e779871ebb3427bb100 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Thu, 6 Feb 2025 16:44:48 +0100 Subject: [PATCH] update to go1.23.6 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This minor release include 1 security fix following the security policy: - crypto/elliptic: timing sidechannel for P-256 on ppc64le Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. This is CVE-2025-22866 and Go issue https://go.dev/issue/71383. View the release notes for more information: https://go.dev/doc/devel/release#go1.23.6 Signed-off-by: Paweł Gronowski --- common.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common.mk b/common.mk index fa2eda5b9c..2cb45431c9 100644 --- a/common.mk +++ b/common.mk @@ -17,7 +17,7 @@ CHOWN:=docker run --rm -v $(CURDIR):/v -w /v alpine chown DEFAULT_PRODUCT_LICENSE:=Community Engine PACKAGER_NAME?= DOCKER_GITCOMMIT:=abcdefg -GO_VERSION:=1.23.5 +GO_VERSION:=1.23.6 PLATFORM=Docker Engine - Community SHELL:=/bin/bash VERSION?=0.0.1-dev