From d34a0c90b1738f744e5314ab2238581532ce1880ee3215540e1d42bc2fd8d48e Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Thu, 20 Dec 2018 11:15:30 +0000 Subject: [PATCH] Accepting request 660128 from home:clee:branches:Virtualization:containers - Update go requirements to >= go1.10.6 to fix * bsc#1118897 CVE-2018-16873 go#29230 cmd/go: remote command execution during "go get -u" * bsc#1118898 CVE-2018-16874 go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths * bsc#1118899 CVE-2018-16875 go#29233 crypto/x509: CPU denial of service OBS-URL: https://build.opensuse.org/request/show/660128 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=276 --- docker.changes | 10 ++++++++++ docker.spec | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/docker.changes b/docker.changes index 584012e..52e6d2a 100644 --- a/docker.changes +++ b/docker.changes @@ -1,4 +1,14 @@ ------------------------------------------------------------------- +Wed Dec 19 19:28:47 UTC 2018 - clee@suse.com + +- Update go requirements to >= go1.10.6 to fix + * bsc#1118897 CVE-2018-16873 + go#29230 cmd/go: remote command execution during "go get -u" + * bsc#1118898 CVE-2018-16874 + go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths + * bsc#1118899 CVE-2018-16875 + go#29233 crypto/x509: CPU denial of service +------------------------------------------------------------------- Tue Dec 18 10:10:06 UTC 2018 - Aleksa Sarai - Handle build breakage due to missing 'export GOPATH' (caused by resolution of diff --git a/docker.spec b/docker.spec index 9ce6b2f..da3d284 100644 --- a/docker.spec +++ b/docker.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # # nodebuginfo