diff --git a/docker.changes b/docker.changes
index 584012e..52e6d2a 100644
--- a/docker.changes
+++ b/docker.changes
@@ -1,4 +1,14 @@
 -------------------------------------------------------------------
+Wed Dec 19 19:28:47 UTC 2018 - clee@suse.com
+
+- Update go requirements to >= go1.10.6 to fix
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service 
+-------------------------------------------------------------------
 Tue Dec 18 10:10:06 UTC 2018 - Aleksa Sarai <asarai@suse.com>
 
 - Handle build breakage due to missing 'export GOPATH' (caused by resolution of
diff --git a/docker.spec b/docker.spec
index 9ce6b2f..da3d284 100644
--- a/docker.spec
+++ b/docker.spec
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 # nodebuginfo