Accepting request 660078 from devel:CaaSP:Head:ControllerNode

OBS-URL: https://build.opensuse.org/request/show/660078
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/flannel?expand=0&rev=13

flannel.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Dec 19 16:55:33 UTC 2018 - clee@suse.com
+
+- Refactor go to go1.11 for BuildRequires 
+
+-------------------------------------------------------------------
+Wed Dec 19 01:18:01 UTC 2018 - clee@suse.com
+
+- Updated to a supported version of Go (due to security reasons)
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service
+
 -------------------------------------------------------------------
 Wed Dec 12 12:43:24 UTC 2018 - alvaro.saurin@suse.com
 

flannel.spec

@@ -38,6 +38,8 @@ BuildRequires:  golang-packaging
 BuildRequires:  systemd
 BuildRequires:  xz
 BuildRequires:  golang(API) >= 1.11
+# go1.11.3 contains sec. fixes bsc#1118897(CVE-2018-16873) bsc#1118897(CVE-2018-16873) bsc#1118899(CVE-2018-16875)
+BuildRequires:  go1.11 >= 1.11.3
 Requires(post): %fillup_prereq
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 ExcludeArch:    s390