-
Notifications
You must be signed in to change notification settings - Fork 39.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump golang to 1.11.3 (CVE-2018-16875) #72035
Conversation
Hi @seemethere. Thanks for your PR. I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
@seemethere Has the Docker Hub tag for golang:1.11.3 been pushed yet? /assign cblecker ixdy |
We also need to bump the rules_go version. The new tags are in the referenced issue. |
Yup images for amd64 were pushed around 3pm PST |
yeah, can you please bump rules_go (in the |
15d231f
to
1905a2d
Compare
1905a2d
to
fd397b3
Compare
also we definitely specify the Go version in too many places :\ /ok-to-test |
I'm working on building the crossbuild image now. |
build/root/WORKSPACE
Outdated
@@ -4,8 +4,8 @@ load("//build:workspace.bzl", "CNI_VERSION", "CRI_TOOLS_VERSION") | |||
|
|||
http_archive( | |||
name = "io_bazel_rules_go", | |||
sha256 = "f87fa87475ea107b3c69196f39c82b7bbf58fe27c62a338684c20ca17d1d8613", | |||
urls = mirror("https://github.com/bazelbuild/rules_go/releases/download/0.16.2/rules_go-0.16.2.tar.gz"), | |||
sha256 = "62ec3496a00445889a843062de9930c228b770218c735eca89c67949cd967c3f" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
oh, a comma was dropped here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
re-added the comma
Updated the test image as well! Yeah the GOLANG_VERSION should probably just be driven by a top level file |
fd397b3
to
b107c54
Compare
The cross-build image is failing to build:
I'm not sure what is wrong. I can't build |
aha, just found https://stackoverflow.com/questions/53371626/apt-key-command-works-on-shell-but-fails-on-dockerfile. Can you add basically this: diff --git a/build/build-image/cross/Dockerfile b/build/build-image/cross/Dockerfile
index 8e4bc0f884..70e42cf87e 100644
--- a/build/build-image/cross/Dockerfile
+++ b/build/build-image/cross/Dockerfile
@@ -44,7 +44,7 @@ RUN apt-get update \
# Use dynamic cgo linking for architectures other than amd64 for the server platforms
# To install crossbuild essential for other architectures add the following repository.
RUN echo "deb http://archive.ubuntu.com/ubuntu xenial main universe" > /etc/apt/sources.list.d/cgocrosscompiling.list \
- && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 40976EAF437D05B5 3B4FE6ACC0B21F32 \
+ && apt-key adv --no-tty --keyserver keyserver.ubuntu.com --recv-keys 40976EAF437D05B5 3B4FE6ACC0B21F32 \
&& apt-get update \
&& apt-get install -y build-essential \
&& for platform in ${KUBE_DYNAMIC_CROSSPLATFORMS}; do apt-get install -y crossbuild-essential-${platform}; done \ |
Signed-off-by: Eli Uriegas <[email protected]>
b107c54
to
d443402
Compare
Have added the |
/retest |
1 similar comment
/retest |
/lgtm |
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: ixdy, seemethere The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
…pstream-release-1.13 Automated cherry pick of #72035 and #72084: bump golang to 1.11.4 (CVE-2018-16875)
What type of PR is this?
/kind cleanup
What this PR does / why we need it:
In the same vein as #70665
Which issue(s) this PR fixes:
Fixes #72032
Special notes for your reviewer:
Does this PR introduce a user-facing change?: