GoogleCloudPlatform / gcsfuse

A user-space file system for interacting with Google Cloud Storage

Home Page:https://cloud.google.com/storage/docs/gcs-fuse

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Please upgrade Go runtime (>= 1.19.8) to fix security vulnerabilities

jhauglid opened this issue · comments

The currently used version of the Go runtime (1.19.7) have several high severity security vulnerabilities that can be detected by scanners such as the Google Artifact Registry scanner.

Here's a list of issues:
https://security-tracker.debian.org/tracker/CVE-2023-24537
https://security-tracker.debian.org/tracker/CVE-2023-24538
https://security-tracker.debian.org/tracker/CVE-2023-24536
https://security-tracker.debian.org/tracker/CVE-2023-24534

All of these have been fixed in 1.19.8
Please consider upgrading.