Files
nomad/.changelog/20066.txt
Tim Gross ac366521f2 deps: upgrade protobuf lib to 1.33.0 (#20100)
Although Nomad is not vulnerable to CVE-2024-24786 because it's configured to
discard unknown messages during unmarshaling, we should upgrade so that
third-party vulnerability scanners don't detect the vulnerable version and
complain.

Also update go1.22.1 changelog entry to include CVEs
2024-03-08 10:55:55 -05:00

4 lines
152 B
Plaintext

```release-note:security
build: Update to go1.22 to address Go standard library vulnerabilities CVE-2024-24783, CVE-2023-45290, and CVE-2024-24785.
```