* [Buildroot] [PATCH 1/1] package/go: security bump to go 1.19.3
@ 2022-11-01 22:15 Christian Stewart via buildroot
2022-11-01 22:22 ` Thomas Petazzoni via buildroot
0 siblings, 1 reply; 2+ messages in thread
From: Christian Stewart via buildroot @ 2022-11-01 22:15 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart, Yann E . MORIN, Thomas Petazzoni
go1.19.3 (released 2022-11-01) includes security fixes to the os/exec and
syscall packages, as well as bug fixes to the compiler and the runtime.
Fixes: CVE-2022-41716
NOTE: this CVE is specific to Windows and is not directly relevant to Buildroot.
https://go.dev/doc/devel/release#go1.19
https://github.com/golang/go/issues?q=milestone%3AGo1.19.3+label%3ACherryPickApproved
Signed-off-by: Christian Stewart <christian@paral.in>
---
package/go/go.hash | 2 +-
package/go/go.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/go/go.hash b/package/go/go.hash
index f944bd5304..c2a7321634 100644
--- a/package/go/go.hash
+++ b/package/go/go.hash
@@ -1,3 +1,3 @@
# From https://go.dev/dl
-sha256 2ce930d70a931de660fdaf271d70192793b1b240272645bf0275779f6704df6b go1.19.2.src.tar.gz
+sha256 18ac263e39210bcf68d85f4370e97fb1734166995a1f63fb38b4f6e07d90d212 go1.19.3.src.tar.gz
sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE
diff --git a/package/go/go.mk b/package/go/go.mk
index fe4d3a29a9..fd4caa2e5a 100644
--- a/package/go/go.mk
+++ b/package/go/go.mk
@@ -4,7 +4,7 @@
#
################################################################################
-GO_VERSION = 1.19.2
+GO_VERSION = 1.19.3
GO_SITE = https://storage.googleapis.com/golang
GO_SOURCE = go$(GO_VERSION).src.tar.gz
--
2.38.1
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/go: security bump to go 1.19.3
2022-11-01 22:15 [Buildroot] [PATCH 1/1] package/go: security bump to go 1.19.3 Christian Stewart via buildroot
@ 2022-11-01 22:22 ` Thomas Petazzoni via buildroot
0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni via buildroot @ 2022-11-01 22:22 UTC (permalink / raw)
To: Christian Stewart via buildroot; +Cc: Yann E . MORIN
Hello Christian,
On Tue, 1 Nov 2022 15:15:37 -0700
Christian Stewart via buildroot <buildroot@buildroot.org> wrote:
> go1.19.3 (released 2022-11-01) includes security fixes to the os/exec and
> syscall packages, as well as bug fixes to the compiler and the runtime.
>
> Fixes: CVE-2022-41716
>
> NOTE: this CVE is specific to Windows and is not directly relevant to Buildroot.
>
> https://go.dev/doc/devel/release#go1.19
> https://github.com/golang/go/issues?q=milestone%3AGo1.19.3+label%3ACherryPickApproved
>
> Signed-off-by: Christian Stewart <christian@paral.in>
> ---
> package/go/go.hash | 2 +-
> package/go/go.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/go/go.hash b/package/go/go.hash
> index f944bd5304..c2a7321634 100644
> --- a/package/go/go.hash
> +++ b/package/go/go.hash
> @@ -1,3 +1,3 @@
> # From https://go.dev/dl
> -sha256 2ce930d70a931de660fdaf271d70192793b1b240272645bf0275779f6704df6b go1.19.2.src.tar.gz
> +sha256 18ac263e39210bcf68d85f4370e97fb1734166995a1f63fb38b4f6e07d90d212 go1.19.3.src.tar.gz
This change in the hash file breaks the coding style: you should use 2
spaces as a separator between fields.
Applied with this fixed. Thanks!
Thomas
--
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-11-01 22:22 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-11-01 22:15 [Buildroot] [PATCH 1/1] package/go: security bump to go 1.19.3 Christian Stewart via buildroot
2022-11-01 22:22 ` Thomas Petazzoni via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.