Skip to content

Commit 0c2dd70

Browse files
Bump golang version to 1.24 to fix Critical CVEs in credential provider package (#4984)
Co-authored-by: Saurabh Parekh <[email protected]>
1 parent bf7536b commit 0c2dd70

File tree

3 files changed

+36
-6
lines changed

3 files changed

+36
-6
lines changed

projects/aws/rolesanywhere-credential-helper/ATTRIBUTION.txt

Lines changed: 33 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -220,9 +220,6 @@ Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
220220
** github.com/aws/aws-sdk-go/internal/sync/singleflight; version v1.44.57 --
221221
https://github.com/aws/aws-sdk-go
222222

223-
** golang.org/go; version go1.18.10 --
224-
https://github.com/golang/go
225-
226223
Copyright (c) 2009 The Go Authors. All rights reserved.
227224

228225
Redistribution and use in source and binary forms, with or without
@@ -252,3 +249,36 @@ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
252249
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
253250

254251
------
252+
253+
** golang.org/go; version go1.24.6 --
254+
https://github.com/golang/go
255+
256+
Copyright 2009 The Go Authors.
257+
258+
Redistribution and use in source and binary forms, with or without
259+
modification, are permitted provided that the following conditions are
260+
met:
261+
262+
* Redistributions of source code must retain the above copyright
263+
notice, this list of conditions and the following disclaimer.
264+
* Redistributions in binary form must reproduce the above
265+
copyright notice, this list of conditions and the following disclaimer
266+
in the documentation and/or other materials provided with the
267+
distribution.
268+
* Neither the name of Google LLC nor the names of its
269+
contributors may be used to endorse or promote products derived from
270+
this software without specific prior written permission.
271+
272+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
273+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
274+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
275+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
276+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
277+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
278+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
279+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
280+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
281+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
282+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
283+
284+
------
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
9edec5b3139eb15e31e05feb3307bdd01617a74ba6572727fe07426e7b42ee59 _output/bin/rolesanywhere-credential-helper/linux-amd64/aws_signing_helper
2-
0db8b9db0cce55f1dd57d9a95a1f238d238f54db34139d0e82c84d89ee576dbd _output/bin/rolesanywhere-credential-helper/linux-arm64/aws_signing_helper
1+
90e46657badc442bd0c63872bbbf9708a4a9a85493369deb2086d2a0120ab338 _output/bin/rolesanywhere-credential-helper/linux-amd64/aws_signing_helper
2+
f5efa3da715025103e43018ef7d49b4527145fc1e0c83456e2f914d4d3f7a60a _output/bin/rolesanywhere-credential-helper/linux-arm64/aws_signing_helper
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
1.18
1+
1.24

0 commit comments

Comments
 (0)