简体繁体中英

How do I update golang standard library in my go application?

原文 2021-07-27 21:45:29 0 1 go/ security/ package/ dependencies/ vendoring

I have an application that was built with go 1.16.4, which uses (imports) the archive/zip component of the Go std lib. I took a look at the golang Release Notes and see that a security vulnerability has been fixed in archive/zip in golang 1.16.5. How do I ensure that my application is no longer vulnerable? Must I upgrade my version of go itself, and then rebuild with that new version of go ? Or could I vendor the newer version of the fixed component then rebuild? Must the files in the build machine's $GOROOT be updated?

1 answers

Must I upgrade my version of go itself, and then rebuild with that new version of go ?

Yes...

Upgrade Go.
Rebuild.

Or could I vendor the newer version of the fixed component then rebuild?

No, you can't vendor the Go standard library.

Must the files in the build machine's $GOROOT be updated?

GOROOT is the root folder of the Go SDK installation. It is updated when you upgrade Go on the machine (or container) that invokes go build / go install .

How do I substitute bytes in a stream using Go standard library?

How do I find out about possible error values of Go standard library functions?

MongoDB in Go (golang) with mgo: How do I update a record, find out if update was successful and get the data in a single atomic operation?

How do I add packages to go / golang in VS code?

How do I Black Hole a standard Go Network Request

How to rebuild go golang application with fresh or air?

How do I create a text index in mongodb with golang and the mgo library?

Generally, how do I “go to definition” in VIM? Then how do I with golang?

How do I update golang from command prompt on Windows?

Golang middleware with just the standard library

暂无

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

Related Question How do I substitute bytes in a stream using Go standard library? How do I find out about possible error values of Go standard library functions? MongoDB in Go (golang) with mgo: How do I update a record, find out if update was successful and get the data in a single atomic operation? How do I add packages to go / golang in VS code? How do I Black Hole a standard Go Network Request How to rebuild go golang application with fresh or air? How do I create a text index in mongodb with golang and the mgo library? Generally, how do I “go to definition” in VIM? Then how do I with golang? How do I update golang from command prompt on Windows? Golang middleware with just the standard library

Related Tags

How do I update golang standard library in my go application?

Question

1 answers

solution1 2 ACCPTED 2021-07-27 22:36:39

solution1
2 ACCPTED 2021-07-27 22:36:39