Skip to content
This repository was archived by the owner on Jan 24, 2019. It is now read-only.

Binaries built using Go 1.5.3 to address TLS security issue #221

Closed
mattbostock opened this issue Feb 25, 2016 · 2 comments
Closed

Binaries built using Go 1.5.3 to address TLS security issue #221

mattbostock opened this issue Feb 25, 2016 · 2 comments

Comments

@mattbostock
Copy link

go1.5.3 (released 2016/01/13) includes a security fix to the math/big package affecting the crypto/tls package, which could affect anyone using oauth2_proxy with TLS enabled.

It might be prudent to release new binaries using Go 1.5.3 to address the issue. Anyone could build their own binaries in the meantime to workaround.

@mattbostock mattbostock changed the title Binaries built using Go 1.5.3 Binaries built using Go 1.5.3 to address TLS security issue Feb 25, 2016
@jehiah
Copy link
Member

jehiah commented Feb 25, 2016

Thanks @mattbostock going to mark this as a duplicate of #193 I've been busier than expected, but this isn't forgotten

@jehiah jehiah closed this as completed Feb 25, 2016
@mattbostock
Copy link
Author

Thanks @jehiah 👍

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

2 participants