Merge pull request #3390 from thaJeztah/20.10_bump_go_1.16.12

[20.10] Update Go to 1.16.12
2021-12-12 07:28:24 +01:00 · 2021-12-12 01:16:34 +01:00 · 2021-12-07 14:30:57 +01:00 · 2021-12-06 11:00:01 +01:00 · 2021-11-18 00:49:46 +01:00 · 2021-11-05 11:16:27 +01:00
6 changed files with 6 additions and 6 deletions
--- a/2
+++ b/2
@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1.3

 ARG BASE_VARIANT=alpine
-ARG GO_VERSION=1.16.9
+ARG GO_VERSION=1.16.12
 ARG XX_VERSION=1.0.0-rc.2

 FROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-${BASE_VARIANT} AS gostable
--- a/appveyor.yml
+++ b/appveyor.yml
@ -4,7 +4,7 @@ clone_folder: c:\gopath\src\github.com\docker\cli

 environment:
  GOPATH: c:\gopath
-  GOVERSION: 1.16.9
+  GOVERSION: 1.16.12
  DEPVERSION: v0.4.1

 install:
--- a/dockerfiles/Dockerfile.binary-native
+++ b/dockerfiles/Dockerfile.binary-native
@ -1,4 +1,4 @@
-ARG GO_VERSION=1.16.9
+ARG GO_VERSION=1.16.10

 FROM    golang:${GO_VERSION}-alpine

--- a/dockerfiles/Dockerfile.dev
+++ b/dockerfiles/Dockerfile.dev
@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.3

-ARG GO_VERSION=1.16.9
+ARG GO_VERSION=1.16.12

 FROM golang:${GO_VERSION}-alpine AS golang
 ENV  CGO_ENABLED=0
--- a/dockerfiles/Dockerfile.e2e
+++ b/dockerfiles/Dockerfile.e2e
@ -1,4 +1,4 @@
-ARG GO_VERSION=1.16.9
+ARG GO_VERSION=1.16.10

 # Use Debian based image as docker-compose requires glibc.
 FROM golang:${GO_VERSION}-buster
--- a/dockerfiles/Dockerfile.lint
+++ b/dockerfiles/Dockerfile.lint
@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.3

-ARG GO_VERSION=1.16.9
+ARG GO_VERSION=1.16.12
 ARG GOLANGCI_LINTER_SHA="v1.21.0"

 FROM    golang:${GO_VERSION}-alpine AS build
Author	SHA1	Message	Date
Silvin Lubecki	e91ed5707e	Merge pull request #3390 from thaJeztah/20.10_bump_go_1.16.12 [20.10] Update Go to 1.16.12	2021-12-12 07:28:24 +01:00
Sebastiaan van Stijn	38dd744a11	[20.10] Update Go to 1.16.12 go1.16.12 (released 2021-12-09) includes security fixes to the syscall and net/http packages. See the Go 1.16.12 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.12+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-12-12 01:16:34 +01:00
Silvin Lubecki	cedc602a78	Merge pull request #3380 from thaJeztah/20.10_backport_bump_go_1.16.11 [20.10 backport] Update Go to 1.16.11	2021-12-07 14:30:57 +01:00
Sebastiaan van Stijn	4de40a825e	Update Go to 1.16.11 go1.16.11 (released 2021-12-02) includes fixes to the compiler, runtime, and the net/http, net/http/httptest, and time packages. See the Go 1.16.11 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.11+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit `dedd4b79ca`) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-12-06 11:00:01 +01:00
Sebastiaan van Stijn	dea9396e18	Merge pull request #3358 from thaJeztah/20.10_backport_bump_go_1.16.10 [20.10 backport] Update Go to 1.16.10	2021-11-18 00:49:46 +01:00
Sebastiaan van Stijn	03fa8f92c8	Update Go to 1.16.10 go1.16.10 (released 2021-11-04) includes security fixes to the archive/zip and debug/macho packages, as well as bug fixes to the compiler, linker, runtime, the misc/wasm directory, and to the net/http package. See the Go 1.16.10 milestone for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.10+label%3ACherryPickApproved From the announcement e-mail: [security] Go 1.17.3 and Go 1.16.10 are released We have just released Go versions 1.17.3 and 1.16.10, minor point releases. These minor releases include two security fixes following the security policy: - archive/zip: don't panic on (*Reader).Open Reader.Open (the API implementing io/fs.FS introduced in Go 1.16) can be made to panic by an attacker providing either a crafted ZIP archive containing completely invalid names or an empty filename argument. Thank you to Colin Arnott, SiteHost and Noah Santschi-Cooney, Sourcegraph Code Intelligence Team for reporting this issue. This is CVE-2021-41772 and Go issue golang.org/issue/48085. - debug/macho: invalid dynamic symbol table command can cause panic Malformed binaries parsed using Open or OpenFat can cause a panic when calling ImportedSymbols, due to an out-of-bounds slice operation. Thanks to Burak Çarıkçı - Yunus Yıldırım (CT-Zer0 Crypttech) for reporting this issue. This is CVE-2021-41771 and Go issue golang.org/issue/48990. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit `e285f15009`) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-11-05 11:16:27 +01:00