Docker Compose v5.6.1 升级 Go 修复 CVE-2026-111943
v5.6.1
推荐理由
涉及核心通信组件的安全修复，官方明确建议立即升级，请受影响用户尽快更新至 v5.6.1。
update to go1.26.10
升级至 go1.26.10
These releases include 1 security fix following the security policy:
这些版本包含 1 项遵循安全策略的安全修复：
- crypto/x509: mitigation for security concerns with a specific Certificate Authority
- We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.
- Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.
- We highly recommend immediately upgrading to this release.
- This is CVE-2026-111943 and Go issue https://go.dev/issue/82345.
- crypto/x509：针对特定证书颁发机构的安全问题提供缓解措施
- 由于对其运营存在特定的安全担忧，我们正阻止信任一组有限的中间证书。
- Verify 现在将过滤掉包含这些中间证书的链，防止其返回给调用者。
- 我们强烈建议立即升级到此版本。
- 此为 CVE-2026-111943 和 Go issue https://go.dev/issue/82345。
Full Changelog: v5.6.0...v5.6.1
完整更新日志：v5.6.0...v5.6.1
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力