From 337c2c14ccb00c1cbcb9cf53da8b213696c95e9a87bc51c45d77bde345a137de Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Thu, 20 Dec 2018 11:15:05 +0000 Subject: [PATCH] Accepting request 660132 from home:clee:branches:Virtualization:containers - Update go requirements to >= go1.10 to fix * bsc#1118897 CVE-2018-16873 go#29230 cmd/go: remote command execution during "go get -u" * bsc#1118898 CVE-2018-16874 go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths * bsc#1118899 CVE-2018-16875 go#29233 crypto/x509: CPU denial of service OBS-URL: https://build.opensuse.org/request/show/660132 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=70 --- runc.changes | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/runc.changes b/runc.changes index b38f8d9..8311113 100644 --- a/runc.changes +++ b/runc.changes @@ -1,4 +1,14 @@ ------------------------------------------------------------------- +Wed Dec 19 19:55:11 UTC 2018 - clee@suse.com + +- Update go requirements to >= go1.10 to fix + * bsc#1118897 CVE-2018-16873 + go#29230 cmd/go: remote command execution during "go get -u" + * bsc#1118898 CVE-2018-16874 + go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths + * bsc#1118899 CVE-2018-16875 + go#29233 crypto/x509: CPU denial of service +------------------------------------------------------------------- Thu Dec 13 04:34:25 UTC 2018 - dorf@suse.com - Require golang = 1.10.