[RHCLOUD-36134] upgrade aws-sdk-go and golang-jwt to the latest version

[petracihalova]

RHCLOUD-36134

upgrade github.com/aws/aws-sdk-go package to the latest version => generate new image with latest base image and fix some vulnerabilities

and upgrade github.com/golang-jwt/jwt/v4 to the latest version and fix vulnerability GHSA-29wx-vh33-7x7r

NAME                          INSTALLED          FIXED-IN            TYPE       VULNERABILITY        SEVERITY 
bzip2-libs                    1.0.6-26.el8       0:1.0.6-27.el8_10   rpm        CVE-2019-12900       Low       
github.com/golang-jwt/jwt/v4  v4.5.0             4.5.1               go-module  GHSA-29wx-vh33-7x7r  Low       
krb5-libs                     1.18.2-29.el8_10   0:1.18.2-30.el8_10  rpm        CVE-2024-3596        High      
openssl-libs                  1:1.1.1k-12.el8_9  1:1.1.1k-14.el8_6   rpm        CVE-2024-5535        Low       
stdlib                        go1.20.10          1.21.11, 1.22.4     go-module  CVE-2024-24790       Critical  
stdlib                        go1.20.10          1.21.0-0            go-module  CVE-2023-24531       Critical  
stdlib                        go1.20.10          1.22.7, 1.23.1      go-module  CVE-2024-34158       High      
stdlib                        go1.20.10          1.22.7, 1.23.1      go-module  CVE-2024-34156       High      
stdlib                        go1.20.10          1.21.12, 1.22.5     go-module  CVE-2024-24791       High      
stdlib                        go1.20.10          1.21.8, 1.22.1      go-module  CVE-2024-24784       High      
stdlib                        go1.20.10          1.21.9, 1.22.2      go-module  CVE-2023-45288       High      
stdlib                        go1.20.10          1.20.12, 1.21.5     go-module  CVE-2023-45285       High      
stdlib                        go1.20.10          1.22.7, 1.23.1      go-module  CVE-2024-34155       Medium    
stdlib                        go1.20.10          1.21.11, 1.22.4     go-module  CVE-2024-24789       Medium    
stdlib                        go1.20.10          1.21.10, 1.22.3     go-module  CVE-2024-24787       Medium    
stdlib                        go1.20.10          1.21.8, 1.22.1      go-module  CVE-2024-24783       Medium    
stdlib                        go1.20.10          1.21.8, 1.22.1      go-module  CVE-2023-45289       Medium    
stdlib                        go1.20.10          1.20.12, 1.21.5     go-module  CVE-2023-39326       Medium    
stdlib                        go1.20.10          1.21.8, 1.22.1      go-module  CVE-2024-24785       Unknown   
stdlib                        go1.20.10          1.21.8, 1.22.1      go-module  CVE-2023-45290       Unknown

[petracihalova]

/retest

[Ellen-Yi-Dong]

LGTM!

[petracihalova]

we can ignore the failing security test

NAME        INSTALLED     FIXED-IN           TYPE       VULNERABILITY   SEVERITY 
bzip2-libs  1.0.6-26.el8  0:1.0.6-27.el8_10  rpm        CVE-2019-12900  Low       
stdlib      go1.21.13     1.22.7, 1.23.1     go-module  CVE-2024-34158  High      
stdlib      go1.21.13     1.22.7, 1.23.1     go-module  CVE-2024-34156  High      
stdlib      go1.21.13     1.22.7, 1.23.1     go-module  CVE-2024-34155  Medium

stdlib (go1.21.13):

• CVE-2024-34158 - backported and fixed here
• CVE-2024-34156 - backported and fixed here
• CVE-2024-34155 - backported and fixed here