rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Go to 1.26.5 to fix stdlib CVEs

Browse Source 
Bump the Go toolchain from 1.26.4 to 1.26.5 to address CVE-2026-42505
(ECH handshake de-anonymization) and CVE-2026-39822 (os.Root symlink
following on Unix).

Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
Sacha Al Himdani
2026-07-09 11:13:32 +02:00
parent 9371d58747
commit ed9cdb4847
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
contrib/lima/provision.sh
View File

@@ -11,7 +11,7 @@ export LIMA_CIDATA_USER
export DEBIAN_FRONTEND=noninteractive
GO_VERSION="1.26.4"
GO_VERSION="1.26.5"
NODE_MAJOR=24
NPM_VERSION="11.8.0"