Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update github.com/containerd/containerd to v1.5.13 to fix security issues #731

Merged
merged 1 commit into from
Jun 8, 2022

Conversation

bmelbourne
Copy link
Contributor

@bmelbourne bmelbourne commented Jun 8, 2022

Update Go github.com/containerd/containerd package to v1.5.13 to fix the following critical security vulnerabilities

CVE-2021-43816
CVE-2022-31030

@bmelbourne
Copy link
Contributor Author

bmelbourne commented Jun 8, 2022

/cc nyrahul

@bmelbourne
Copy link
Contributor Author

@nyrahul
Apologies not sure what happened with the previous PR #726, I was resetting my branch in an attempt to reapply the Go containerd package update.

These are commands I'm executing to update the Go package...

go1.15.15 get github.com/containerd/[email protected]

go1.15.15 mod tidy

I'm running multiple Go environments, hence why I'm using go1.15.15.

❯ go1.15.15 env
GO111MODULE=""
GOARCH="amd64"
GOBIN=""
GOCACHE="/home/ubuntu/.cache/go-build"
GOENV="/home/ubuntu/.config/go/env"
GOEXE=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOINSECURE=""
GOMODCACHE="/home/ubuntu/go/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/home/ubuntu/go"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/home/ubuntu/sdk/go1.15.15"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/home/ubuntu/sdk/go1.15.15/pkg/tool/linux_amd64"
GCCGO="gccgo"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/home/ubuntu/github/KubeArmor/KubeArmor/go.mod"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build344973948=/tmp/go-build -gno-record-gcc-switches"

@nyrahul nyrahul self-requested a review June 8, 2022 09:46
Copy link
Contributor

@nyrahul nyrahul left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks for the PR.

@nyrahul nyrahul merged commit c9c63c5 into kubearmor:main Jun 8, 2022
@bmelbourne bmelbourne deleted the bugfix/update-go-containerd-pkg branch June 9, 2022 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants