[jira] [Created] (YUNIKORN-3511) Update go compiler version and net/x/http for CVE fixes

["Wilfred Spiegelenburg (Jira)" <ji...@apache.org>]

Wilfred Spiegelenburg created YUNIKORN-3511:
-----------------------------------------------

             Summary: Update go compiler version and net/x/http for CVE fixes
                 Key: YUNIKORN-3511
                 URL: https://issues.apache.org/jira/browse/YUNIKORN-3511
             Project: Apache YuniKorn
          Issue Type: Task
          Components: core - common, shim - kubernetes, webapp
            Reporter: Wilfred Spiegelenburg
            Assignee: Wilfred Spiegelenburg


Go 1.27.2 and 1.26.9 contain a large number of CVE fixes that impact YuniKorn code base:

These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:
 * CVE-2026-97032
 * CVE-2026-78659
 * CVE-2026-97031
 * CVE-2026-94440
 * CVE-2026-56866
 * CVE-2026-94439
 * CVE-2026-78669
 * CVE-2026-56857
 * CVE-2026-78667
 * CVE-2026-78663

Some CVE fixes also impact the {{golang.org/net/x/http}} library so we need a {{go.mod}} update to get the full fix.

As part of the change moving to Go 1.27 for the regular builds



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org