backport of commit cf2f48efd4ecf68f2502d4443a60477d1e3fb0f5 (#19017)

Co-authored-by: Seth Hoenig <shoenig@duck.com>
This commit is contained in:
hc-github-team-nomad-core 2023-11-07 14:04:24 -06:00 committed by GitHub
parent db11c461ce
commit 9634ef7bb2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 7 additions and 4 deletions

3
.changelog/19013.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:security
build: Update to go1.21.4 to resolve Windows path validation CVE in Go
```

View File

@ -1 +1 @@
1.21.3 1.21.4

View File

@ -30,7 +30,7 @@ A development environment is supplied via Vagrant to make getting started easier
Developing without Vagrant Developing without Vagrant
--- ---
1. Install [Go 1.21.3+](https://golang.org/) *(Note: `gcc-go` is not supported)* 1. Install [Go 1.21.4+](https://golang.org/) *(Note: `gcc-go` is not supported)*
1. Clone this repo 1. Clone this repo
```sh ```sh
$ git clone https://github.com/hashicorp/nomad.git $ git clone https://github.com/hashicorp/nomad.git

View File

@ -21,7 +21,7 @@ case $(arch) in
esac esac
function install_go() { function install_go() {
local go_version="1.21.3" local go_version="1.21.4"
local download="https://storage.googleapis.com/golang/go${go_version}.linux-${ARCH}.tar.gz" local download="https://storage.googleapis.com/golang/go${go_version}.linux-${ARCH}.tar.gz"
if go version 2>&1 | grep -q "${go_version}"; then if go version 2>&1 | grep -q "${go_version}"; then

View File

@ -56,7 +56,7 @@ REPO_PATH="${TMP_WORKSPACE}/gopath/src/github.com/hashicorp/nomad"
mkdir -p "${TMP_WORKSPACE}/tmp" mkdir -p "${TMP_WORKSPACE}/tmp"
install_go() { install_go() {
local go_version="1.21.3" local go_version="1.21.4"
local download= local download=
download="https://storage.googleapis.com/golang/go${go_version}.darwin-amd64.tar.gz" download="https://storage.googleapis.com/golang/go${go_version}.darwin-amd64.tar.gz"