github-starred/ollama
2
0
Fork 0
mirror of https://github.com/ollama/ollama.git synced 2026-05-06 16:11:34 -05:00
Code Issues 14.5k Packages Projects Releases 120 Wiki Activity

[PR #5757] [MERGED] bump go version to 1.22.5 to fix security vulnerabilities in docker #17184

New Issue
Closed
opened 2026-04-16 05:54:43 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-16 05:54:43 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/ollama/ollama/pull/5757
Author: @lreed-mdsol
Created: 7/17/2024
Status: ✅ Merged
Merged: 7/22/2024
Merged by: @dhiltgen

Base: main ← Head: lreed/bump-go-version-fix-vulnerabilities

📝 Commits (1)

  • f02f836 bump go version to 1.22.5 to fix security vulnerabilities

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 Dockerfile (+1 -1)

📄 Description

The existing Version of 1.22.1 Is showing Security Vulnerabilities when scanned by Prisma

Scan results for: image ollama/ollama:latest sha256:56505af4d7ed5e66de96c124c21312aee6cdd518098efd0fa524738f24b1a701
Vulnerabilities
| CVE | SEVERITY | CVSS | PACKAGE | VERSION | STATUS | PUBLISHED | DISCOVERED | DESCRIPTION |
| CVE-2024-24790 | critical | 9.80 | net/netip | 1.22.1 | fixed in 1.21.11, 1.22.4 | 42 days | < 1 hour | The various Is methods (IsPrivate, IsLoopback, |
| | | | | | 42 days ago | |

This minor update to GO 1.22.5 fixes the CRITICAL CVE-2024-24790, as well as corrects the MEDIUM CVE-2024-24791 .

I locally built and tested the Docker Build.

Scan results for: image ollama_orig_1_22_5:latest sha256:5b7f98e681c9a7b807d02beecc2eb303a5303a6cd248dcf448ae360e79b759ab
Vulnerabilities found for image ollama_orig_1_22_5:latest: total - 16, critical - 0, high - 0, medium - 4, low - 12

It would be great to get these fixes in ASAP.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/ollama/ollama/pull/5757 **Author:** [@lreed-mdsol](https://github.com/lreed-mdsol) **Created:** 7/17/2024 **Status:** ✅ Merged **Merged:** 7/22/2024 **Merged by:** [@dhiltgen](https://github.com/dhiltgen) **Base:** `main` ← **Head:** `lreed/bump-go-version-fix-vulnerabilities` --- ### 📝 Commits (1) - [`f02f836`](https://github.com/ollama/ollama/commit/f02f83660c2e6f0741932bb31a28b82950144dfc) bump go version to 1.22.5 to fix security vulnerabilities ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `Dockerfile` (+1 -1) </details> ### 📄 Description The existing Version of 1.22.1 Is showing Security Vulnerabilities when scanned by Prisma Scan results for: image ollama/ollama:latest sha256:56505af4d7ed5e66de96c124c21312aee6cdd518098efd0fa524738f24b1a701 Vulnerabilities | CVE | SEVERITY | CVSS | PACKAGE | VERSION | STATUS | PUBLISHED | DISCOVERED | DESCRIPTION | | CVE-2024-24790 | critical | 9.80 | net/netip | 1.22.1 | fixed in 1.21.11, 1.22.4 | 42 days | < 1 hour | The various Is methods (IsPrivate, IsLoopback, | | | | | | | 42 days ago | | This minor update to GO 1.22.5 fixes the CRITICAL CVE-2024-24790, as well as corrects the MEDIUM CVE-2024-24791 . I locally built and tested the Docker Build. Scan results for: image ollama_orig_1_22_5:latest sha256:5b7f98e681c9a7b807d02beecc2eb303a5303a6cd248dcf448ae360e79b759ab Vulnerabilities found for image ollama_orig_1_22_5:latest: total - 16, critical - 0, high - 0, medium - 4, low - 12 It would be great to get these fixes in ASAP. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-16 05:54:43 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
amd
api
app
bug
build
cli
cloud
compatibility
context-length
create
docker
documentation
embeddings
feature request
feedback wanted
good first issue
gpt-oss
gpu
harmony
help wanted
image
install
intel
js
launch
linux
macos
memory
mlx
model
needs more info
networking
nvidia
ollama.com
performance
pull-request
Mirrored from GitHub Pull Request
 python
question
registry
rendering
thinking
tools
top
vulkan
windows
wsl
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#17184
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?