From 7da2f55c1a8c9715c985bc7646d49a309781eb7a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Thu, 6 Feb 2025 16:51:33 +0100 Subject: [PATCH] update to go1.22.12 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This minor release include 1 security fix following the security policy: - crypto/elliptic: timing sidechannel for P-256 on ppc64le Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. This is CVE-2025-22866 and Go issue https://go.dev/issue/71383. View the release notes for more information: https://go.dev/doc/devel/release#go1.22.12 Signed-off-by: Paweł Gronowski --- common.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common.mk b/common.mk index 73676e8d4b..2176863e70 100644 --- a/common.mk +++ b/common.mk @@ -17,7 +17,7 @@ CHOWN:=docker run --rm -v $(CURDIR):/v -w /v alpine chown DEFAULT_PRODUCT_LICENSE:=Community Engine PACKAGER_NAME?= DOCKER_GITCOMMIT:=abcdefg -GO_VERSION:=1.22.11 +GO_VERSION:=1.22.12 PLATFORM=Docker Engine - Community SHELL:=/bin/bash VERSION?=0.0.1-dev