furyhawk/milvus
1
0
Fork 0
mirror of https://github.com/milvus-io/milvus.git synced 2026-07-22 02:35:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

enhance: Bump Go version to 1.24.12 and upgrade gpgv fixing CVEs (#47541)

Browse Source 
- Upgrade Go from 1.24.11 to 1.24.12 to fix CVE-2025-61726 (net/url
query parameter DoS) and CVE-2025-61728 (archive/zip CPU exhaustion)
- Upgrade gpgv in Ubuntu Dockerfiles to fix CVE-2025-68973 (GnuPG
out-of-bounds write vulnerability)

Signed-off-by: Li Liu <li.liu@zilliz.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Li Liu
2026-02-04 17:19:50 +08:00
committed by GitHub
co-authored by Claude Opus 4.5
parent 30417cd6a0
commit f36ed5500b
16 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/mac.yaml
+1 -1
View File
@@ -78,7 +78,7 @@ jobs:
- name: Setup Go environment
uses: actions/setup-go@v4
with:
go-version: '1.24.11'
go-version: '1.24.12'
cache: false
- name: Download Caches
uses: ./.github/actions/macos-cache-restore
build/docker/builder/cpu/amazonlinux2023/Dockerfile
+1 -1
View File
@@ -22,7 +22,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/rockylinux8/Dockerfile
+1 -1
View File
@@ -27,7 +27,7 @@ RUN dnf -y update && \
RUN pip3 install conan==1.64.1
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
RUN curl https://sh.rustup.rs -sSf | \
sh -s -- --default-toolchain=1.89 -y
build/docker/builder/cpu/ubuntu20.04/Dockerfile
+1 -1
View File
@@ -33,7 +33,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/ubuntu22.04/Dockerfile
+1 -1
View File
@@ -39,7 +39,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/gpu/ubuntu20.04/Dockerfile
+1 -1
View File
@@ -44,7 +44,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b ${GOROOT}/bin v1.46.2 && \
# export GO111MODULE=on && go get github.com/quasilyte/go-ruleguard/cmd/ruleguard@v0.2.1 && \
build/docker/builder/gpu/ubuntu22.04/Dockerfile
+1 -1
View File
@@ -16,7 +16,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends wget curl ca-ce
# Install go
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.11.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
# Install conan
RUN pip3 install conan==1.64.1
# Install rust
build/docker/milvus/ubuntu20.04/Dockerfile
+1
View File
@@ -19,6 +19,7 @@ RUN apt-get update && \
apt-get install -y --no-install-recommends ca-certificates && \
sed -i 's/http:/https:/g' /etc/apt/sources.list && \
apt-get update && \
apt-get upgrade -y gpgv && \
apt-get install -y --no-install-recommends curl libaio-dev libgomp1 libopenblas-dev && \
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends tzdata && \
ln -sf /usr/share/zoneinfo/Etc/UTC /etc/localtime && \
build/docker/milvus/ubuntu22.04/Dockerfile
+1
View File
@@ -19,6 +19,7 @@ RUN apt-get update && \
apt-get install -y --no-install-recommends ca-certificates && \
sed -i 's/http:/https:/g' /etc/apt/sources.list && \
apt-get update && \
apt-get upgrade -y gpgv && \
apt-get install -y --no-install-recommends curl libaio-dev libgomp1 libopenblas-dev && \
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends tzdata && \
ln -sf /usr/share/zoneinfo/Etc/UTC /etc/localtime && \
client/README.md
+1 -1
View File
@@ -10,7 +10,7 @@ Go MilvusClient for [Milvus](https://github.com/milvus-io/milvus). To contribute
### Prerequisites
Go 1.24.11 or higher
Go 1.24.12 or higher
### Install Milvus Go SDK
client/go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus/client/v2
go 1.24.11
go 1.24.12
require (
github.com/blang/semver/v4 v4.0.0
go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus
go 1.24.11
go 1.24.12
require (
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1
go.sum
-2
View File
@@ -799,8 +799,6 @@ github.com/milvus-io/cgosymbolizer v0.0.0-20250318084424-114f4050c3a6 h1:YHMFI6L
github.com/milvus-io/cgosymbolizer v0.0.0-20250318084424-114f4050c3a6/go.mod h1:DvXTE/K/RtHehxU8/GtDs4vFtfw64jJ3PaCnFri8CRg=
github.com/milvus-io/gorocksdb v0.0.0-20220624081344-8c5f4212846b h1:TfeY0NxYxZzUfIfYe5qYDBzt4ZYRqzUjTR6CvUzjat8=
github.com/milvus-io/gorocksdb v0.0.0-20220624081344-8c5f4212846b/go.mod h1:iwW+9cWfIzzDseEBCCeDSN5SD16Tidvy8cwQ7ZY8Qj4=
github.com/milvus-io/milvus-proto/go-api/v2 v2.6.6-0.20260113024922-c7feeb806088 h1:qzlpV+1xygF/XK0bRVoLFg03uAQSCZ2AywZR3wt5ov0=
github.com/milvus-io/milvus-proto/go-api/v2 v2.6.6-0.20260113024922-c7feeb806088/go.mod h1:/6UT4zZl6awVeXLeE7UGDWZvXj3IWkRsh3mqsn0DiAs=
github.com/milvus-io/milvus-proto/go-api/v2 v2.6.6-0.20260129065928-046ced892c8b h1:Hpe1VKWnOt0EIgLgYgTA5Q6VLY2DOjMf1ikeaSVFOus=
github.com/milvus-io/milvus-proto/go-api/v2 v2.6.6-0.20260129065928-046ced892c8b/go.mod h1:/6UT4zZl6awVeXLeE7UGDWZvXj3IWkRsh3mqsn0DiAs=
github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 h1:AMFGa4R4MiIpspGNG7Z948v4n35fFGB3RR3G/ry4FWs=
pkg/go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus/pkg/v2
go 1.24.11
go 1.24.12
require (
cloud.google.com/go/storage v1.50.0
tests/go_client/Dockerfile
+1 -1
View File
@@ -1,4 +1,4 @@
FROM golang:1.24.11 as builder
FROM golang:1.24.12 as builder
# Define a build argument with an empty default value
ARG CUSTOM_GOPROXY=""
tests/go_client/go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus/tests/go_client
go 1.24.11
go 1.24.12
require (
github.com/milvus-io/milvus-proto/go-api/v2 v2.6.6-0.20260129065928-046ced892c8b