Skip to content

Bump Golang 1.11.4 (includes fix for CVE-2018-16875) - #1585

Merged
thaJeztah merged 1 commit into
docker:masterfrom
thaJeztah:bump_golang_1.11.4
Jan 8, 2019
Merged

Bump Golang 1.11.4 (includes fix for CVE-2018-16875)#1585
thaJeztah merged 1 commit into
docker:masterfrom
thaJeztah:bump_golang_1.11.4

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
runtime, documentation, go command, and the net/http and go/types packages. It
includes a fix to a bug introduced in Go 1.11.3 that broke go get for import
path patterns containing "...".

See the Go 1.11.4 milestone for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved

go1.11.3 (released 2018/12/14)

See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3

go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
runtime, documentation, go command, and the net/http and go/types packages. It
includes a fix to a bug introduced in Go 1.11.3 that broke go get for import
path patterns containing "...".
See the Go 1.11.4 milestone for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
go1.11.3 (released 2018/12/14)
- crypto/x509: CPU denial of service in chain validation golang/go#29233
- cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231
- cmd/go: remote command execution during "go get -u" golang/go#29230
See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@codecov-io

Copy link
Copy Markdown

Codecov Report

Merging #1585 into master will not change coverage.
The diff coverage is n/a.

@@ Coverage Diff @@## master #1585 +/- ##
=======================================
Coverage 55.26% 55.26% =======================================
Files 289 289 Lines 19385 19385 =======================================
Hits 10713 10713 Misses 7977 7977 Partials 695 695

1 similar comment
@codecov-io

Copy link
Copy Markdown

Codecov Report

Merging #1585 into master will not change coverage.
The diff coverage is n/a.

@@ Coverage Diff @@## master #1585 +/- ##
=======================================
Coverage 55.26% 55.26% =======================================
Files 289 289 Lines 19385 19385 =======================================
Hits 10713 10713 Misses 7977 7977 Partials 695 695

@vdemeestervdemeester left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🐯

@thaJeztah
thaJeztah merged commit 0d4a858 into docker:masterJan 8, 2019
@GordonTheTurtleGordonTheTurtle added this to the 19.03.0 milestone Jan 8, 2019
@thaJeztah
thaJeztah deleted the bump_golang_1.11.4 branch January 8, 2019 01:50
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@thaJeztah@codecov-io@vdemeester@dnephin@GordonTheTurtle