Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cmd/go: pseudoversions can refer to external commits [1.11 backport] #31195

Closed
gopherbot opened this issue Apr 1, 2019 · 2 comments
Closed

cmd/go: pseudoversions can refer to external commits [1.11 backport] #31195

gopherbot opened this issue Apr 1, 2019 · 2 comments

Comments

@gopherbot
Copy link

@gopherbot gopherbot commented Apr 1, 2019

@FiloSottile requested issue #31191 to be considered for backport to the next 1.11 minor release.

@gopherbot please open backport issues for this. It is a security issue and we want to make sure the entire modules ecosystem will reject the external pseudoversions.

@julieqiu

This comment has been minimized.

Copy link

@julieqiu julieqiu commented Apr 24, 2019

Approving since this is a security issue. Please follow the instructions at https://github.com/golang/go/wiki/MinorReleases to create the cherrypick CL.

@rsc

This comment has been minimized.

Copy link
Contributor

@rsc rsc commented Apr 30, 2019

Don't cherry-pick. See my comment on #31191.

@rsc rsc closed this Apr 30, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
5 participants
You can’t perform that action at this time.