[rocko][PATCH 0/1] backport go 1.9.4 update to rocko

[rocko][PATCH 0/1] backport go 1.9.4 update to rocko

[Matt Madison]

One of the changes included in this point release update
fixes an issue with the construction of Go's shared runtim
library, so it would be great to backport this to rocko
to fix [YOCTO 12592].

Thanks,
-Matt

Otavio Salvador (1):
  go: Upgrade 1.9 to 1.9.4 stable release

 meta/recipes-devtools/go/go-1.9.inc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

-- 
2.14.1

[rocko][PATCH 1/1] go: Upgrade 1.9 to 1.9.4 stable release

[Matt Madison]

From: Otavio Salvador <otavio@ossystems.com.br>

The 1.9.4 fixes a number of issues in the Go compiler and is important
to get in before we start working on 1.10 inclusion.

 - go1.9.1 (released 2017/10/04) includes two security fixes.

 - go1.9.2 (released 2017/10/25) includes fixes to the compiler,
   linker, runtime, documentation, go command, and the crypto/x509,
   database/sql, log, and net/smtp packages. It includes a fix to a
   bug introduced in Go 1.9.1 that broke go get of non-Git
   repositories under certain conditions.

 - go1.9.3 (released 2018/01/22) includes fixes to the compiler,
   runtime, and the database/sql, math/big, net/http, and net/url
   packages.

 - go1.9.4 (released 2018/02/07) includes a security fix to “go get”.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Matt Madison <matt@madison.systems>
---
 meta/recipes-devtools/go/go-1.9.inc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/meta/recipes-devtools/go/go-1.9.inc b/meta/recipes-devtools/go/go-1.9.inc
index 7f12241dc1..2823304b7c 100644
--- a/meta/recipes-devtools/go/go-1.9.inc
+++ b/meta/recipes-devtools/go/go-1.9.inc
@@ -1,6 +1,9 @@
 require go-common.inc
 
 GO_BASEVERSION = "1.9"
+GO_MINOR = ".4"
+PV .= "${GO_MINOR}"
+
 FILESEXTRAPATHS_prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:"
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707"
@@ -19,5 +22,5 @@ SRC_URI += "\
 "
 SRC_URI_append_libc-musl = " file://set-external-linker.patch"
 
-SRC_URI[main.md5sum] = "da2d44ea384076efec43ee1f8b7d45d2"
-SRC_URI[main.sha256sum] = "a4ab229028ed167ba1986825751463605264e44868362ca8e7accc8be057e993"
+SRC_URI[main.md5sum] = "6816441fd6680c63865cdd5cb8bc1960"
+SRC_URI[main.sha256sum] = "0573a8df33168977185aa44173305e5a0450f55213600e94541604b75d46dc06"
-- 
2.14.1

Re: [rocko][PATCH 1/1] go: Upgrade 1.9 to 1.9.4 stable release

[Burton, Ross]

[-- Attachment #1: Type: text/plain, Size: 2282 bytes --]

Note that stable branch policy is to cherry-pick security fixes unless
they're too complicated/risky to pick (openssl is the notable example here).

Ross

On 12 March 2018 at 11:29, Matt Madison <matt@madison.systems> wrote:

> From: Otavio Salvador <otavio@ossystems.com.br>
>
> The 1.9.4 fixes a number of issues in the Go compiler and is important
> to get in before we start working on 1.10 inclusion.
>
>  - go1.9.1 (released 2017/10/04) includes two security fixes.
>
>  - go1.9.2 (released 2017/10/25) includes fixes to the compiler,
>    linker, runtime, documentation, go command, and the crypto/x509,
>    database/sql, log, and net/smtp packages. It includes a fix to a
>    bug introduced in Go 1.9.1 that broke go get of non-Git
>    repositories under certain conditions.
>
>  - go1.9.3 (released 2018/01/22) includes fixes to the compiler,
>    runtime, and the database/sql, math/big, net/http, and net/url
>    packages.
>
>  - go1.9.4 (released 2018/02/07) includes a security fix to “go get”.
>
> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
> Signed-off-by: Ross Burton <ross.burton@intel.com>
> Signed-off-by: Matt Madison <matt@madison.systems>
> ---
>  meta/recipes-devtools/go/go-1.9.inc | 7 +++++--
>  1 file changed, 5 insertions(+), 2 deletions(-)
>
> diff --git a/meta/recipes-devtools/go/go-1.9.inc
> b/meta/recipes-devtools/go/go-1.9.inc
> index 7f12241dc1..2823304b7c 100644
> --- a/meta/recipes-devtools/go/go-1.9.inc
> +++ b/meta/recipes-devtools/go/go-1.9.inc
> @@ -1,6 +1,9 @@
>  require go-common.inc
>
>  GO_BASEVERSION = "1.9"
> +GO_MINOR = ".4"
> +PV .= "${GO_MINOR}"
> +
>  FILESEXTRAPATHS_prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:"
>
>  LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707"
> @@ -19,5 +22,5 @@ SRC_URI += "\
>  "
>  SRC_URI_append_libc-musl = " file://set-external-linker.patch"
>
> -SRC_URI[main.md5sum] = "da2d44ea384076efec43ee1f8b7d45d2"
> -SRC_URI[main.sha256sum] = "a4ab229028ed167ba1986825751463
> 605264e44868362ca8e7accc8be057e993"
> +SRC_URI[main.md5sum] = "6816441fd6680c63865cdd5cb8bc1960"
> +SRC_URI[main.sha256sum] = "0573a8df33168977185aa44173305e
> 5a0450f55213600e94541604b75d46dc06"
> --
> 2.14.1
>
>

[-- Attachment #2: Type: text/html, Size: 3140 bytes --]

Re: [rocko][PATCH 1/1] go: Upgrade 1.9 to 1.9.4 stable release

[Otavio Salvador]

On Mon, Mar 12, 2018 at 8:44 AM, Burton, Ross <ross.burton@intel.com> wrote:
> Note that stable branch policy is to cherry-pick security fixes unless
> they're too complicated/risky to pick (openssl is the notable example here).

I strong believe Go should be dealt in same way; it is known to be
good at supporting forwarding upgrades easily and it does fix some
security and other bugs. Picking them would be pointless and risky.

-- 
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750

Re: [rocko][PATCH 0/1] backport go 1.9.4 update to rocko

[Otavio Salvador]

On Mon, Mar 12, 2018 at 8:29 AM, Matt Madison <matt@madison.systems> wrote:
> One of the changes included in this point release update
> fixes an issue with the construction of Go's shared runtim
> library, so it would be great to backport this to rocko
> to fix [YOCTO 12592].

Acked-by: Otavio Salvador <otavio@ossystems.com.br>

-- 
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750