This includes additional fixes for CVE-2021-39293.
go1.16.8 (released 2021-09-09) includes a security fix to the archive/zip package,
as well as bug fixes to the archive/zip, go/internal/gccgoimporter, html/template,
net/http, and runtime/pprof packages. See the Go 1.16.8 milestone on the issue
tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.16.8+label%3ACherryPickApproved
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
| ... | ... |
@@ -3,7 +3,7 @@ |
| 3 | 3 |
ARG CROSS="false" |
| 4 | 4 |
ARG SYSTEMD="false" |
| 5 | 5 |
# IMPORTANT: When updating this please note that stdlib archive/tar pkg is vendored |
| 6 |
-ARG GO_VERSION=1.16.7 |
|
| 6 |
+ARG GO_VERSION=1.16.8 |
|
| 7 | 7 |
ARG DEBIAN_FRONTEND=noninteractive |
| 8 | 8 |
ARG VPNKIT_VERSION=0.5.0 |
| 9 | 9 |
ARG DOCKER_BUILDTAGS="apparmor seccomp" |
| ... | ... |
@@ -165,7 +165,7 @@ FROM microsoft/windowsservercore |
| 165 | 165 |
# Use PowerShell as the default shell |
| 166 | 166 |
SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"] |
| 167 | 167 |
|
| 168 |
-ARG GO_VERSION=1.16.7 |
|
| 168 |
+ARG GO_VERSION=1.16.8 |
|
| 169 | 169 |
ARG GOTESTSUM_COMMIT=v0.5.3 |
| 170 | 170 |
|
| 171 | 171 |
# Environment variable notes: |