tianon / gosu

Simple Go-based setuid+setgid+setgroups+exec

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

New release to pick up Golang 1.16.12

daveneeley opened this issue · comments

The underlying golang version of the docker container that built the 1.14 release is 1.16.7, which is subject to CVE-2021-39293, addressed in 1.16.8. The build from three days ago should be built with go 1.16.12.

Unfortunately, I don't think it's worth doing a new release just for this: gosu doesn't use archive/zip 🙈

See also #94

I'm sorry I missed that! Thank you very much.