From d9273fc18d85b27c7ee4cedf0743e13b137a4f51 Mon Sep 17 00:00:00 2001 From: Chai Bot Date: Thu, 3 Sep 2026 19:20:54 +0000 Subject: [PATCH] EDM-4509: bump Go toolchain to go1.26.7 to fix 5 CVEs on release-1.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upgrade Go module version from go1.24.0 to go1.26.4 and toolchain from go1.25.8 to go1.26.7, aligning with flightctl/flightctl release-1.2 and both repos' release-1.1 and main branches. This single toolchain bump resolves all 5 Go stdlib CVEs: - CVE-2026-27145 (crypto/x509, fixed go1.26.4) — EDM-4509 - CVE-2026-56853 (net/http, fixed go1.26.6) — EDM-5185 - CVE-2026-56862 (crypto/tls, fixed go1.26.6) — EDM-5193 - CVE-2026-33818 (encoding/asn1, fixed go1.26.6) — EDM-5197 - CVE-2026-56860 (net/url, fixed go1.26.6) — EDM-5199 Co-Authored-By: Claude Opus 4.6 --- packaging/images/el10/Containerfile | 2 +- packaging/images/el10/Containerfile.ocp | 2 +- packaging/images/el9/Containerfile | 2 +- packaging/images/el9/Containerfile.ocp | 2 +- proxy/go.mod | 4 ++-- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/packaging/images/el10/Containerfile b/packaging/images/el10/Containerfile index 5fec1cc18a..456a86b23a 100644 --- a/packaging/images/el10/Containerfile +++ b/packaging/images/el10/Containerfile @@ -12,7 +12,7 @@ ENV NODE_OPTIONS='--max-old-space-size=8192' RUN npm ci RUN npm run build -FROM registry.access.redhat.com/ubi10/go-toolset:1.25.8-1774618351 as proxy-build +FROM registry.access.redhat.com/ubi10/go-toolset:1.26.7-1787775323 as proxy-build WORKDIR /app COPY proxy /app USER 0 diff --git a/packaging/images/el10/Containerfile.ocp b/packaging/images/el10/Containerfile.ocp index 689251d674..f72869fbad 100644 --- a/packaging/images/el10/Containerfile.ocp +++ b/packaging/images/el10/Containerfile.ocp @@ -14,7 +14,7 @@ ARG PLUGIN_VERSION="" ENV PLUGIN_VERSION=$PLUGIN_VERSION RUN npm run build:ocp -FROM registry.access.redhat.com/ubi10/go-toolset:1.25.8-1774618351 as proxy-build +FROM registry.access.redhat.com/ubi10/go-toolset:1.26.7-1787775323 as proxy-build WORKDIR /app COPY proxy /app USER 0 diff --git a/packaging/images/el9/Containerfile b/packaging/images/el9/Containerfile index 78fbe60ddf..53e4fb353b 100644 --- a/packaging/images/el9/Containerfile +++ b/packaging/images/el9/Containerfile @@ -12,7 +12,7 @@ ENV NODE_OPTIONS='--max-old-space-size=8192' RUN npm ci RUN npm run build -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.8-1774618347 as proxy-build +FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7-1787774815 as proxy-build WORKDIR /app COPY proxy /app USER 0 diff --git a/packaging/images/el9/Containerfile.ocp b/packaging/images/el9/Containerfile.ocp index 42e280ce13..6f8e808fc0 100644 --- a/packaging/images/el9/Containerfile.ocp +++ b/packaging/images/el9/Containerfile.ocp @@ -14,7 +14,7 @@ ARG PLUGIN_VERSION="" ENV PLUGIN_VERSION=$PLUGIN_VERSION RUN npm run build:ocp -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.8-1774618347 as proxy-build +FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7-1787774815 as proxy-build WORKDIR /app COPY proxy /app USER 0 diff --git a/proxy/go.mod b/proxy/go.mod index 3f78e5c38b..2940461b0f 100644 --- a/proxy/go.mod +++ b/proxy/go.mod @@ -1,8 +1,8 @@ module github.com/flightctl/flightctl-ui -go 1.24.0 +go 1.26.4 -toolchain go1.25.8 +toolchain go1.26.7 require ( github.com/flightctl/flightctl v1.0.0