commit flannel for openSUSE:Factory
![](https://seccdn.libravatar.org/avatar/e2145bc5cf53dda95c308a3c75e8fef3.jpg?s=120&d=mm&r=g)
Hello community, here is the log from the commit of package flannel for openSUSE:Factory checked in at 2018-12-28 12:33:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/flannel (Old) and /work/SRC/openSUSE:Factory/.flannel.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "flannel" Fri Dec 28 12:33:58 2018 rev:13 rq:660078 version:0.9.1 Changes: -------- --- /work/SRC/openSUSE:Factory/flannel/flannel.changes 2018-12-13 19:49:03.444653385 +0100 +++ /work/SRC/openSUSE:Factory/.flannel.new.28833/flannel.changes 2018-12-28 12:34:00.136018704 +0100 @@ -1,0 +2,16 @@ +Wed Dec 19 16:55:33 UTC 2018 - clee@suse.com + +- Refactor go to go1.11 for BuildRequires + +------------------------------------------------------------------- +Wed Dec 19 01:18:01 UTC 2018 - clee@suse.com + +- Updated to a supported version of Go (due to security reasons) + * bsc#1118897 CVE-2018-16873 + go#29230 cmd/go: remote command execution during "go get -u" + * bsc#1118898 CVE-2018-16874 + go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths + * bsc#1118899 CVE-2018-16875 + go#29233 crypto/x509: CPU denial of service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ flannel.spec ++++++ --- /var/tmp/diff_new_pack.taJsjt/_old 2018-12-28 12:34:00.748018279 +0100 +++ /var/tmp/diff_new_pack.taJsjt/_new 2018-12-28 12:34:00.752018276 +0100 @@ -38,6 +38,8 @@ BuildRequires: systemd BuildRequires: xz BuildRequires: golang(API) >= 1.11 +# go1.11.3 contains sec. fixes bsc#1118897(CVE-2018-16873) bsc#1118897(CVE-2018-16873) bsc#1118899(CVE-2018-16875) +BuildRequires: go1.11 >= 1.11.3 Requires(post): %fillup_prereq BuildRoot: %{_tmppath}/%{name}-%{version}-build ExcludeArch: s390
participants (1)
-
root