* [Buildroot] [PATCH v1 1/1] package/go: security bump version to go1.22.5 @ 2024-07-03 19:33 Christian Stewart via buildroot 2024-07-12 21:10 ` Thomas Petazzoni via buildroot 0 siblings, 1 reply; 3+ messages in thread From: Christian Stewart via buildroot @ 2024-07-03 19:33 UTC (permalink / raw) To: buildroot; +Cc: Christian Stewart, Yann E . MORIN, Thomas Petazzoni Fixes CVE: CVE-2024-24791: net/http: denial of service due to improper 100-continue handling https://go.dev/doc/devel/release#go1.22.5 Signed-off-by: Christian Stewart <christian@aperture.us> --- package/go/go-src/go-src.hash | 2 +- package/go/go.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/go/go-src/go-src.hash b/package/go/go-src/go-src.hash index 7952461f2d..d300f6e2c9 100644 --- a/package/go/go-src/go-src.hash +++ b/package/go/go-src/go-src.hash @@ -1,3 +1,3 @@ # From https://go.dev/dl -sha256 fed720678e728a7ca30ba8d1ded1caafe27d16028fab0232b8ba8e22008fb784 go1.22.4.src.tar.gz +sha256 ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6 go1.22.5.src.tar.gz sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE diff --git a/package/go/go.mk b/package/go/go.mk index 91a8fb828f..bfbe997911 100644 --- a/package/go/go.mk +++ b/package/go/go.mk @@ -4,7 +4,7 @@ # ################################################################################ -GO_VERSION = 1.22.4 +GO_VERSION = 1.22.5 HOST_GO_GOPATH = $(HOST_DIR)/share/go-path HOST_GO_HOST_CACHE = $(HOST_DIR)/share/host-go-cache -- 2.45.2 _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH v1 1/1] package/go: security bump version to go1.22.5 2024-07-03 19:33 [Buildroot] [PATCH v1 1/1] package/go: security bump version to go1.22.5 Christian Stewart via buildroot @ 2024-07-12 21:10 ` Thomas Petazzoni via buildroot 2024-08-07 21:14 ` Peter Korsgaard 0 siblings, 1 reply; 3+ messages in thread From: Thomas Petazzoni via buildroot @ 2024-07-12 21:10 UTC (permalink / raw) To: Christian Stewart via buildroot; +Cc: Yann E . MORIN, Christian Stewart On Wed, 3 Jul 2024 12:33:29 -0700 Christian Stewart via buildroot <buildroot@buildroot.org> wrote: > Fixes CVE: > > CVE-2024-24791: net/http: denial of service due to improper 100-continue handling > > https://go.dev/doc/devel/release#go1.22.5 > > Signed-off-by: Christian Stewart <christian@aperture.us> > --- > package/go/go-src/go-src.hash | 2 +- > package/go/go.mk | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) Applied to master, thanks. Thomas -- Thomas Petazzoni, CTO, Bootlin Embedded Linux and Kernel engineering https://bootlin.com _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH v1 1/1] package/go: security bump version to go1.22.5 2024-07-12 21:10 ` Thomas Petazzoni via buildroot @ 2024-08-07 21:14 ` Peter Korsgaard 0 siblings, 0 replies; 3+ messages in thread From: Peter Korsgaard @ 2024-08-07 21:14 UTC (permalink / raw) To: Thomas Petazzoni via buildroot Cc: Christian Stewart, Yann E . MORIN, Thomas Petazzoni >>>>> "Thomas" == Thomas Petazzoni via buildroot <buildroot@buildroot.org> writes: > On Wed, 3 Jul 2024 12:33:29 -0700 > Christian Stewart via buildroot <buildroot@buildroot.org> wrote: >> Fixes CVE: >> >> CVE-2024-24791: net/http: denial of service due to improper 100-continue handling >> >> https://go.dev/doc/devel/release#go1.22.5 >> >> Signed-off-by: Christian Stewart <christian@aperture.us> >> --- >> package/go/go-src/go-src.hash | 2 +- >> package/go/go.mk | 2 +- >> 2 files changed, 2 insertions(+), 2 deletions(-) > Applied to master, thanks. Committed to 2024.05.x, thanks. For 204.02.x I will instead bump to 1.21.12. -- Bye, Peter Korsgaard _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2024-08-07 21:14 UTC | newest] Thread overview: 3+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2024-07-03 19:33 [Buildroot] [PATCH v1 1/1] package/go: security bump version to go1.22.5 Christian Stewart via buildroot 2024-07-12 21:10 ` Thomas Petazzoni via buildroot 2024-08-07 21:14 ` Peter Korsgaard
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox