Bump Golang 1.11.3 (CVE-2018-16875)#283
Merged
seemethere merged 1 commit intodocker:masterfrom Dec 17, 2018
Merged
Conversation
|
you have a typo: |
thaJeztah
force-pushed
the
bump_golang_1.11.3
branch
from
985d53d to
6b8b8fe
Compare
Member
Author
|
whoops; fixed the typo 😂 |
go1.11.3 (released 2018/12/14) - crypto/x509: CPU denial of service in chain validation golang/go#29233 - cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231 - cmd/go: remote command execution during "go get -u" golang/go#29230 See the Go 1.11.3 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.11.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
thaJeztah
force-pushed
the
bump_golang_1.11.3
branch
from
6b8b8fe to
517a30b
Compare
thaJeztah
changed the title
Member
Author
|
Rebased, now that #281 was merged @seemethere @andrewhsu PTAL |
Contributor
|
We might just need to update this to read for golang:1.11.4 now that that's released. Currently waiting on docker-library/official-images#5197 |
Member
Author
|
@seemethere let's get to 1.11.3 first (which is only the security fix), after that we can bump upstream moby/moby to 1.11.4 (which has quite a few more changes). I'd like to give it a full run of the moby/moby CI to check if there's no regressions |
seemethere
approved these changes
Dec 17, 2018
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow up to #281 for master; moby/moby master now uses Golang 1.11, so master should probably be on this version
go1.11.3 (released 2018/12/14)
See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3