Uploaded image for project: 'Beam'
  1. Beam
  2. BEAM-14456

Use Go 1.18.2 to build 2.39 Container Bootloaders

Details

    Description

      It's been noted that by using older Go releases to compile Go containers we run the risk of the bootloaders using vulnerable versions.

      This issue is to close the gap for 2.39, while a separate one is to document the policy of keeping the release artifacts built with the latest Go version.

      While it's unlikely to be an attack vector, it's prudent that we keep these gaps as closed as we're able.

      Attachments

        Issue Links

          Activity

            People

              lostluck Robert Burke
              lostluck Robert Burke
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1.5h
                  1.5h