Skip to content
Permalink
Browse files

Bump Golang 1.11.4 (includes fix for CVE-2018-16875)

go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
runtime, documentation, go command, and the net/http and go/types packages. It
includes a fix to a bug introduced in Go 1.11.3 that broke go get for import
path patterns containing "...".

See the Go 1.11.4 milestone for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved

go1.11.3 (released 2018/12/14)

- crypto/x509: CPU denial of service in chain validation golang/go#29233
- cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231
- cmd/go: remote command execution during "go get -u" golang/go#29230

See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit deaf6e1)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
  • Loading branch information...
thaJeztah committed Dec 19, 2018
1 parent 763a85d commit 9bc199d93522e3e73daa3c4e0bc07b0158ac0cf8
@@ -4,7 +4,7 @@ clone_folder: c:\gopath\src\github.com\docker\cli

environment:
GOPATH: c:\gopath
GOVERSION: 1.11.2
GOVERSION: 1.11.4
DEPVERSION: v0.4.1

install:
@@ -1,4 +1,4 @@
FROM golang:1.11.2-alpine
FROM golang:1.11.4-alpine

RUN apk add -U git bash coreutils gcc musl-dev

@@ -1,4 +1,4 @@
FROM dockercore/golang-cross:1.11.2@sha256:7e8945e30dae5d6455a3e75e5091e642f79110301a86d08f8c93991518e930b3
FROM dockercore/golang-cross:1.11.4@sha256:9e5f0013a7dbc49b6726267577803202b403be1a560c0c03c4e215d7e2476b1b
ENV DISABLE_WARN_OUTSIDE_CONTAINER=1
WORKDIR /go/src/github.com/docker/cli
COPY . .
@@ -1,4 +1,4 @@
FROM golang:1.11.2-alpine
FROM golang:1.11.4-alpine

RUN apk add -U git make bash coreutils ca-certificates curl

@@ -1,4 +1,4 @@
ARG GO_VERSION=1.11.2
ARG GO_VERSION=1.11.4

FROM docker/containerd-shim-process:a4d1531 AS containerd-shim-process

@@ -1,4 +1,4 @@
FROM golang:1.11.2-alpine
FROM golang:1.11.4-alpine

RUN apk add -U git

0 comments on commit 9bc199d

Please sign in to comment.
You can’t perform that action at this time.