From 0b3920df624f80e10c4ef53c942668e2da7f5cd8 Mon Sep 17 00:00:00 2001 From: Ainar Garipov Date: Thu, 7 Sep 2023 14:10:35 +0300 Subject: [PATCH] Pull request 1997: upd-go Squashed commit of the following: commit 7e558500d08328b4dca4ef67160334f27c8c48d6 Author: Ainar Garipov Date: Thu Sep 7 13:54:50 2023 +0300 all: upd go, tools --- .github/workflows/build.yml | 2 +- .github/workflows/lint.yml | 2 +- CHANGELOG.md | 26 ++++--- bamboo-specs/release.yaml | 6 +- bamboo-specs/snapcraft.yaml | 6 +- bamboo-specs/test.yaml | 2 +- internal/tools/go.mod | 10 +-- internal/tools/go.sum | 18 ++--- scripts/make/go-lint.sh | 135 ++++++++++++++++++++---------------- 9 files changed, 114 insertions(+), 93 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index da8ca358..c9a48519 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -1,7 +1,7 @@ 'name': 'build' 'env': - 'GO_VERSION': '1.20.7' + 'GO_VERSION': '1.20.8' 'NODE_VERSION': '14' 'on': diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 773f0494..a3c68e6a 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -1,7 +1,7 @@ 'name': 'lint' 'env': - 'GO_VERSION': '1.20.7' + 'GO_VERSION': '1.20.8' 'on': 'push': diff --git a/CHANGELOG.md b/CHANGELOG.md index 4ae24312..6de14190 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -23,12 +23,18 @@ See also the [v0.107.37 GitHub milestone][ms-v0.107.37]. NOTE: Add new changes BELOW THIS COMMENT. --> +### Security + +- Go version has been updated to prevent the possibility of exploiting the + CVE-2023-39318, CVE-2023-39319, and CVE-2023-39320 Go vulnerabilities fixed in + [Go 1.20.8][go-1.20.8]. + ### Added - AdBlock-style syntax support for ignored domains in logs and statistics ([#5720]). - [`Strict-Transport-Security`][hsts] header in the HTTP API and DNS-over-HTTPS - responses when HTTPS is forced ([#2998]). See [RFC 6979][rfc6797]. + responses when HTTPS is forced ([#2998]). See [RFC 6797][rfc6797]. - UI for the schedule of the service-blocking pause ([#951]). - IPv6 hints are now filtered in case IPv6 addresses resolving is disabled ([#6122]). @@ -36,7 +42,8 @@ NOTE: Add new changes BELOW THIS COMMENT. ([#3701]). - While adding or updating blocklists, the title can now be parsed from `! Title:` definition of the blocklist's source ([#6020]). -- The ability to filter DNS HTTPS records including IPv4/v6 hints ([#6053]). +- The ability to filter DNS HTTPS records including IPv4 and IPv6 hints + ([#6053]). - Two new metrics showing total number of responses from each upstream DNS server and their average processing time in the Web UI ([#1453]). - The ability to set the port for the `pprof` debug API, see configuration @@ -54,9 +61,9 @@ NOTE: Add new changes BELOW THIS COMMENT. In this release, the schema version has changed from 24 to 27. -- Ignore rules blocking `.` in `querylog.…` and `stats.…` have been migrated to - AdBlock syntax (`|.^`). To rollback this change, restore the rules and - change the `schema_version` back to `26`. +- Ignore rules blocking `.` in `querylog.ignored` and `statistics.ignored` have + been migrated to AdBlock syntax (`|.^`). To rollback this change, restore the + rules and change the `schema_version` back to `26`. - Filtering-related settings have been moved from `dns` section of the YAML configuration file to the new section `filtering`: @@ -173,8 +180,9 @@ In this release, the schema version has changed from 24 to 27. [#6122]: https://github.com/AdguardTeam/AdGuardHome/issues/6122 [#6133]: https://github.com/AdguardTeam/AdGuardHome/issues/6133 -[hsts]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security -[rfc6797]: https://datatracker.ietf.org/doc/html/rfc6797 +[go-1.20.8]: https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM/m/F5bwBlXMAQAJ +[hsts]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security +[rfc6797]: https://datatracker.ietf.org/doc/html/rfc6797