diff --git a/CHANGELOG.md b/CHANGELOG.md index 5ad1483978f..a495fbac2ab 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## 2.13.1 + +* [BUGFIX] Upgrade Go to 1.22.9 to address [CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156). # + ## 2.13.0 ### Grafana Mimir diff --git a/mimir-build-image/Dockerfile b/mimir-build-image/Dockerfile index a26db0f6dab..577497b9c2c 100644 --- a/mimir-build-image/Dockerfile +++ b/mimir-build-image/Dockerfile @@ -5,7 +5,7 @@ FROM registry.k8s.io/kustomize/kustomize:v5.4.1 as kustomize FROM alpine/helm:3.14.4 as helm -FROM golang:1.22.5-bookworm +FROM golang:1.22.9-bookworm ARG goproxyValue ENV GOPROXY=${goproxyValue} ENV SKOPEO_DEPS="libgpgme-dev libassuan-dev libbtrfs-dev libdevmapper-dev pkg-config"