mirrors/milvus
0
0 Fork 0
mirror of https://github.com/milvus-io/milvus.git synced 2026-10-28 08:55:40 +08:00
Code Activity

build(deps): upgrade Go to 1.26.10 to fix CVE-2026-111943 (#54597)

Browse Source 
## Summary

Fix the High-severity Go stdlib CVE reported by the daily image scan
(`milvusdb/milvus:master-20261021-d0ce73ca`).

| CVE | Component | Installed | Fixed | Severity |
|-----|-----------|-----------|-------|----------|
| CVE-2026-111943 | Go stdlib `crypto/x509` | v1.26.9 | 1.26.10 / 1.27.3
| High |

CVE-2026-111943: man-in-the-middle attacks via untrusted intermediate
certificates in `crypto/x509`, fixed in Go 1.26.10.

## Change scope

Bump the Go toolchain `1.26.9` -> `1.26.10`:

- `go.mod` / `pkg/go.mod` / `tests/go_client/go.mod`: `go 1.26.9` ->
`1.26.10`
- Builder images (build the `bin/milvus` copied into every runtime
image):
-
`build/docker/builder/cpu/{ubuntu22.04,ubuntu20.04,ubuntu24.04,amazonlinux2023,rockylinux9}/Dockerfile`
  - `build/docker/builder/gpu/{ubuntu22.04,ubuntu20.04}/Dockerfile`
  - `build/docker/meta-migration/builder/Dockerfile`
  - `build/rpm/setup-env.sh`
  - `tests/go_client/Dockerfile`
- `.github/workflows/mac.yaml`,
`.github/workflows/publish-krte-images.yaml`

## Runtime image coverage

This is a Go toolchain fix. The six published runtime Dockerfiles

(`build/docker/milvus/{ubuntu22.04,ubuntu20.04,amazonlinux2023,rockylinux9}`
and `gpu/{ubuntu22.04,ubuntu20.04}`) copy the same `bin/milvus` / `lib/`
outputs built by the above builder images, so bumping the shared builder
toolchain + `go.mod` covers every image. No per-Dockerfile OS-package
change is required and none is skipped.

`client/go.mod` is left unchanged (client library intentionally supports
older Go).

Auto-generated CVE fix (autonomous run).

Signed-off-by: Li Liu <li.liu@zilliz.com>

Signed-off-by: Li Liu <li.liu@zilliz.com>
This commit is contained in:
Li Liu authored and GitHub committed 2026-10-26 19:46:19 +08:00
1 parent f51f353725
commit 9d441ec7cb
15 files changed
+15 -15
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/mac.yaml
+1 -1
View File
@@ -52,7 +52,7 @@ jobs:
- name: Setup Go environment
uses: actions/setup-go@v4
with:
go-version: '1.26.9'
go-version: '1.26.10'
cache: false
- name: Download Caches
uses: ./.github/actions/macos-cache-restore
.github/workflows/publish-krte-images.yaml
+1 -1
View File
@@ -39,7 +39,7 @@ jobs:
working-directory: build/docker/krte
run: |
export TAG=${{ steps.extracter.outputs.version }}-${{ steps.extracter.outputs.sha_short }}
docker build --build-arg IMAGE_ARG="milvusdb/krte:$TAG" --build-arg GO_VERSION=1.26.9 -t "milvusdb/krte:$TAG" .
docker build --build-arg IMAGE_ARG="milvusdb/krte:$TAG" --build-arg GO_VERSION=1.26.10 -t "milvusdb/krte:$TAG" .
- name: Docker Push
if: success() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' )&& github.repository == 'milvus-io/milvus'
continue-on-error: true
build/docker/builder/cpu/amazonlinux2023/Dockerfile
+1 -1
View File
@@ -37,7 +37,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/rockylinux9/Dockerfile
+1 -1
View File
@@ -43,7 +43,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/ubuntu20.04/Dockerfile
+1 -1
View File
@@ -56,7 +56,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/ubuntu22.04/Dockerfile
+1 -1
View File
@@ -53,7 +53,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/cpu/ubuntu24.04/Dockerfile
+1 -1
View File
@@ -49,7 +49,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
go clean --modcache && \
chmod -R 777 "$GOPATH" && chmod -R a+w $(go env GOTOOLDIR)
build/docker/builder/gpu/ubuntu20.04/Dockerfile
+1 -1
View File
@@ -58,7 +58,7 @@ ENV GOPATH /go
ENV GOROOT /usr/local/go
ENV GO111MODULE on
ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b ${GOROOT}/bin v2.11.3 && \
# export GO111MODULE=on && go get github.com/quasilyte/go-ruleguard/cmd/ruleguard@v0.2.1 && \
build/docker/builder/gpu/ubuntu22.04/Dockerfile
+1 -1
View File
@@ -31,7 +31,7 @@ RUN uv python install 3.12.13 && \
# Install go
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.9.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.26.10.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
# Install conan
# Install rust
RUN curl https://sh.rustup.rs -sSf | \
build/docker/meta-migration/builder/Dockerfile
+1 -1
View File
@@ -1,2 +1,2 @@
FROM golang:1.26.9-alpine3.22
FROM golang:1.26.10-alpine3.22
RUN apk add --no-cache make bash
build/rpm/setup-env.sh
+1 -1
View File
@@ -40,7 +40,7 @@ export GOPATH="/go"
export GOROOT="/usr/local/go"
export GO111MODULE="on"
export PATH="$GOPATH/bin:$GOROOT/bin:$PATH"
mkdir -p /usr/local/go && wget -qO- "https://golang.org/dl/go1.26.9.linux-amd64.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p /usr/local/go && wget -qO- "https://golang.org/dl/go1.26.10.linux-amd64.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go && \
mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b ${GOPATH}/bin v1.43.0 && \
export GO111MODULE=on && go get github.com/quasilyte/go-ruleguard/cmd/ruleguard@v0.2.1 && \
go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus
go 1.26.9
go 1.26.10
require (
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1
pkg/go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus/pkg/v3
go 1.26.9
go 1.26.10
require (
cloud.google.com/go/storage v1.56.0
tests/go_client/Dockerfile
+1 -1
View File
@@ -1,4 +1,4 @@
FROM golang:1.26.9 as builder
FROM golang:1.26.10 as builder
# Define a build argument with an empty default value
ARG CUSTOM_GOPROXY=""
tests/go_client/go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/milvus-io/milvus/tests/go_client
go 1.26.9
go 1.26.10
require (
github.com/apache/arrow/go/v17 v17.0.0