From 3383790d28ba6dded90c029179d29f8863b7871f Mon Sep 17 00:00:00 2001 From: David Michael Date: Wed, 7 Mar 2018 18:54:15 -0500 Subject: [PATCH] build_library: Whitelist the new Go 1.9 GLSA This is the same case as the previous one. Our Go 1.8 package has the fix, but none of the older unsupported versions do. Since we have multiple installed versions and this says anything less than Go 1.9 is vulnerable, we have to whitelist it until all older versions of Go are removed from the OS. --- build_library/test_image_content.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/build_library/test_image_content.sh b/build_library/test_image_content.sh index ae3ef0a7d9..69fb83724e 100644 --- a/build_library/test_image_content.sh +++ b/build_library/test_image_content.sh @@ -5,6 +5,7 @@ GLSA_WHITELIST=( 201412-09 # incompatible CA certificate version numbers 201710-23 # we handle Go differently; drop when 1.9 builds everything + 201803-03 # same as above, drop when all Go < 1.9 packages are gone ) glsa_image() {