Skip to content

[master] bump go 1.16.6, and remove Go version override from static builds#563

Merged
thaJeztah merged 3 commits intodocker:masterfrom
thaJeztah:bump_go_1.16.6
Jul 29, 2021
Merged

[master] bump go 1.16.6, and remove Go version override from static builds#563
thaJeztah merged 3 commits intodocker:masterfrom
thaJeztah:bump_go_1.16.6

Conversation

@thaJeztah
Copy link
Member

Bump go 1.16.6 (addresses CVE-2021-34558)
This addresses CVE-2021-34558: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558

go1.16.6 (released 2021-07-12) includes a security fix to the crypto/tls package,
as well as bug fixes to the compiler, and the net and net/http packages. See the
Go 1.16.6 milestone on the issue tracker for details:

https://github.com/golang/go/issues?q=milestone%3AGo1.16.6+label%3ACherryPickApproved

…m64"

This reverts commit 60e28c9.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
Use the version that's defined/set in common.mk

Signed-off-by: Sebastiaan van Stijn <[email protected]>
This addresses CVE-2021-34558: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558

go1.16.6 (released 2021-07-12) includes a security fix to the crypto/tls package,
as well as bug fixes to the compiler, and the net and net/http packages. See the
Go 1.16.6 milestone on the issue tracker for details:

https://github.com/golang/go/issues?q=milestone%3AGo1.16.6+label%3ACherryPickApproved

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@thaJeztah thaJeztah changed the title Bump go 1.16.6, and remove Go version override from static builds [master] bump go 1.16.6, and remove Go version override from static builds Jul 28, 2021
Copy link

@djs55 djs55 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@thaJeztah thaJeztah merged commit 2754270 into docker:master Jul 29, 2021
@thaJeztah thaJeztah deleted the bump_go_1.16.6 branch July 29, 2021 11:04
thaJeztah pushed a commit to thaJeztah/docker-ce-packaging that referenced this pull request May 19, 2022
[ce-nightly] Updates to build and verify docker-scan-plugin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants