Bump Golang 1.11.3 (CVE-2018-16875) #14
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
go1.11.13 (released 2018/12/14) - crypto/x509: CPU denial of service in chain validation golang/go#29233 - cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231 - cmd/go: remote command execution during "go get -u" golang/go#29230 See the Go 1.11.3 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.11.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
|
ping @seemethere @andrewhsu PTAL |
seemethere
approved these changes
Dec 13, 2018
|
@thaJeztah be aware, there's a bit of an issue with the release that may want you to delay: |
|
@theckman thanks! I saw the issue, so we'll have to check if we run into that during our builds (not sure if we use |
|
@thaJeztah It's possibly I misunderstand but I think the risk would be anyone who uses the resulting Docker image for building running in to it, not necessarily during the build of the image itself. |
|
Gotcha; yes, for other uses of this image that may be an issue. This image is primarily created for building the docker/cli (although it's not used for the actual releases). I'll updated again as soon as a new golang patch release is available 👍 |
|
Go 1.11.4 bump coming in #17 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
go1.11.13 (released 2018/12/14)
See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
Signed-off-by: Sebastiaan van Stijn github@gone.nl