Commit 4d78d74
committed
tools: Upgrade go
Upgrade go to 1.23.6 to fix vulnerability only listed on linux.
Vulnerability #1: GO-2025-3447
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
More info: https://pkg.go.dev/vuln/GO-2025-3447
Standard library
Found in: crypto/internal/nistec@go1.23.5
Fixed in: crypto/internal/nistec@go1.23.6
Platforms: ppc64le
Example traces found:
#1: pkg/cli/runtime.go:89:21: cli.Platform.Cls calls exec.Command, which eventually calls nistec.P256Point.SetBytes
We are not doing a full upgrade because the last one was just merged and I can't
upgrade on mac without first fixing the rounding issue (chicken-egg).1 parent 63ce1d4 commit 4d78d74
3 files changed
+2
-2
lines changedFile renamed without changes.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
0 commit comments