* [OE-core][PATCH 1/2] go: upgrade 1.25.0 -> 1.25.1
@ 2025-10-07 20:13 Peter Marko
2025-10-07 20:13 ` [OE-core][PATCH 2/2] go: upgrade 1.25.1 -> 1.25.2 Peter Marko
0 siblings, 1 reply; 2+ messages in thread
From: Peter Marko @ 2025-10-07 20:13 UTC (permalink / raw)
To: openembedded-core; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
Upgrade to latest 1.25.x release [1]:
$ git --no-pager log --oneline go1.25.0..go1.25.1
56ebf80e57 (tag: go1.25.1) [release-branch.go1.25] go1.25.1
b1959cf6f7 [release-branch.go1.25] net/http: require exact match for CrossSiteProtection bypass patterns
cdd8cf4988 [release-branch.go1.25] net: fix WriteMsgUDPAddrPort addr handling on IPv4 sockets
8995e84ac6 [release-branch.go1.25] internal/poll: set the correct file offset in FD.Seek for Windows overlapped handles
749dff880a [release-branch.go1.25] runtime: make all synctest bubble violations fatal panics
21ac81c1e1 [release-branch.go1.25] os/exec: fix incorrect expansion of ".." in LookPath on plan9
c72fcab6d6 [release-branch.go1.25] cmd/go/internal/gover: fix ModIsPrerelease for toolchain versions
Fixes CVE-2025-47910 [2].
[1] https://github.com/golang/go/compare/go1.25.0...go1.25.1
[2] https://groups.google.com/g/golang-announce/c/PtW9VW21NPs
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
meta/recipes-devtools/go/{go-1.25.0.inc => go-1.25.1.inc} | 2 +-
...o-binary-native_1.25.0.bb => go-binary-native_1.25.1.bb} | 6 +++---
...cross-canadian_1.25.0.bb => go-cross-canadian_1.25.1.bb} | 0
.../go/{go-cross_1.25.0.bb => go-cross_1.25.1.bb} | 0
.../go/{go-crosssdk_1.25.0.bb => go-crosssdk_1.25.1.bb} | 0
.../go/{go-runtime_1.25.0.bb => go-runtime_1.25.1.bb} | 0
meta/recipes-devtools/go/{go_1.25.0.bb => go_1.25.1.bb} | 0
7 files changed, 4 insertions(+), 4 deletions(-)
rename meta/recipes-devtools/go/{go-1.25.0.inc => go-1.25.1.inc} (91%)
rename meta/recipes-devtools/go/{go-binary-native_1.25.0.bb => go-binary-native_1.25.1.bb} (79%)
rename meta/recipes-devtools/go/{go-cross-canadian_1.25.0.bb => go-cross-canadian_1.25.1.bb} (100%)
rename meta/recipes-devtools/go/{go-cross_1.25.0.bb => go-cross_1.25.1.bb} (100%)
rename meta/recipes-devtools/go/{go-crosssdk_1.25.0.bb => go-crosssdk_1.25.1.bb} (100%)
rename meta/recipes-devtools/go/{go-runtime_1.25.0.bb => go-runtime_1.25.1.bb} (100%)
rename meta/recipes-devtools/go/{go_1.25.0.bb => go_1.25.1.bb} (100%)
diff --git a/meta/recipes-devtools/go/go-1.25.0.inc b/meta/recipes-devtools/go/go-1.25.1.inc
similarity index 91%
rename from meta/recipes-devtools/go/go-1.25.0.inc
rename to meta/recipes-devtools/go/go-1.25.1.inc
index 1558b4623d1..ca36caed0fb 100644
--- a/meta/recipes-devtools/go/go-1.25.0.inc
+++ b/meta/recipes-devtools/go/go-1.25.1.inc
@@ -18,4 +18,4 @@ SRC_URI += "\
file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \
file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \
"
-SRC_URI[main.sha256sum] = "4bd01e91297207bfa450ea40d4d5a93b1b531a5e438473b2a06e18e077227225"
+SRC_URI[main.sha256sum] = "d010c109cee94d80efe681eab46bdea491ac906bf46583c32e9f0dbb0bd1a594"
diff --git a/meta/recipes-devtools/go/go-binary-native_1.25.0.bb b/meta/recipes-devtools/go/go-binary-native_1.25.1.bb
similarity index 79%
rename from meta/recipes-devtools/go/go-binary-native_1.25.0.bb
rename to meta/recipes-devtools/go/go-binary-native_1.25.1.bb
index 2b9ad19d702..f82a23d62fd 100644
--- a/meta/recipes-devtools/go/go-binary-native_1.25.0.bb
+++ b/meta/recipes-devtools/go/go-binary-native_1.25.1.bb
@@ -9,9 +9,9 @@ PROVIDES = "go-native"
# Checksums available at https://go.dev/dl/
SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "2852af0cb20a13139b3448992e69b868e50ed0f8a1e5940ee1de9e19a123b613"
-SRC_URI[go_linux_arm64.sha256sum] = "05de75d6994a2783699815ee553bd5a9327d8b79991de36e38b66862782f54ae"
-SRC_URI[go_linux_ppc64le.sha256sum] = "0f18a89e7576cf2c5fa0b487a1635d9bcbf843df5f110e9982c64df52a983ad0"
+SRC_URI[go_linux_amd64.sha256sum] = "7716a0d940a0f6ae8e1f3b3f4f36299dc53e31b16840dbd171254312c41ca12e"
+SRC_URI[go_linux_arm64.sha256sum] = "65a3e34fb2126f55b34e1edfc709121660e1be2dee6bdf405fc399a63a95a87d"
+SRC_URI[go_linux_ppc64le.sha256sum] = "8b0c8d3ee5b1b5c28b6bd63dc4438792012e01d03b4bf7a61d985c87edab7d1f"
UPSTREAM_CHECK_URI = "https://golang.org/dl/"
UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.25.0.bb b/meta/recipes-devtools/go/go-cross-canadian_1.25.1.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross-canadian_1.25.0.bb
rename to meta/recipes-devtools/go/go-cross-canadian_1.25.1.bb
diff --git a/meta/recipes-devtools/go/go-cross_1.25.0.bb b/meta/recipes-devtools/go/go-cross_1.25.1.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross_1.25.0.bb
rename to meta/recipes-devtools/go/go-cross_1.25.1.bb
diff --git a/meta/recipes-devtools/go/go-crosssdk_1.25.0.bb b/meta/recipes-devtools/go/go-crosssdk_1.25.1.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-crosssdk_1.25.0.bb
rename to meta/recipes-devtools/go/go-crosssdk_1.25.1.bb
diff --git a/meta/recipes-devtools/go/go-runtime_1.25.0.bb b/meta/recipes-devtools/go/go-runtime_1.25.1.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-runtime_1.25.0.bb
rename to meta/recipes-devtools/go/go-runtime_1.25.1.bb
diff --git a/meta/recipes-devtools/go/go_1.25.0.bb b/meta/recipes-devtools/go/go_1.25.1.bb
similarity index 100%
rename from meta/recipes-devtools/go/go_1.25.0.bb
rename to meta/recipes-devtools/go/go_1.25.1.bb
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [OE-core][PATCH 2/2] go: upgrade 1.25.1 -> 1.25.2
2025-10-07 20:13 [OE-core][PATCH 1/2] go: upgrade 1.25.0 -> 1.25.1 Peter Marko
@ 2025-10-07 20:13 ` Peter Marko
0 siblings, 0 replies; 2+ messages in thread
From: Peter Marko @ 2025-10-07 20:13 UTC (permalink / raw)
To: openembedded-core; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
Upgrade to latest 1.25.x release [1]:
$ git --no-pager log --oneline go1.25.1..go1.25.2
bed6c81c2d (tag: go1.25.2) [release-branch.go1.25] go1.25.2
2612dcfd3c [release-branch.go1.25] archive/tar: set a limit on the size of GNU sparse file 1.0 regions
90f72bd500 [release-branch.go1.25] encoding/pem: make Decode complexity linear
e0f655bf3f [release-branch.go1.25] encoding/asn1: prevent memory exhaustion when parsing using internal/saferio
100c5a6680 [release-branch.go1.25] net/http: add httpcookiemaxnum GODEBUG option to limit number of cookies parsed
f0c69db15a [release-branch.go1.25] crypto/x509: improve domain name verification
9fd3ac8a10 [release-branch.go1.25] net/url: enforce stricter parsing of bracketed IPv6 hostnames
5d7a787aa2 [release-branch.go1.25] net/textproto: avoid quadratic complexity in Reader.ReadResponse
930ce220d0 [release-branch.go1.25] crypto/x509: mitigate DoS vector when intermediate certificate contains DSA public key
6a057327cf [release-branch.go1.25] net/mail: avoid quadratic behavior in mail address parsing
66f6feaa53 [release-branch.go1.25] spec: revert "update spec date to match release date"
d6f2741248 [release-branch.go1.25] spec: update spec date to match release date
28ac8d2104 [release-branch.go1.25] net/http: avoid connCount underflow race
06993c7721 [release-branch.go1.25] context: don't return a non-nil from Err before Done is closed
0b53e410f8 [release-branch.go1.25] debug/pe: permit symbols with no name
7735dc90ed [release-branch.go1.25] cmd/compile: don't rely on loop info when there are irreducible loops
205d086595 [release-branch.go1.25] crypto/tls: quote protocols in ALPN error message
16fdaac4b1 [release-branch.go1.25] sync/atomic: correct Uintptr.Or return doc
f3dc4aac0b [release-branch.go1.25] runtime: initialise debug settings much earlier in startup process
79c3081b4b [release-branch.go1.25] internal/poll: don't call Seek for overlapped Windows handles
b816c79658 [release-branch.go1.25] lib/fips140: re-seal v1.0.0
90de3b3399 [release-branch.go1.25] crypto/internal/fips140: remove key import PCTs, make keygen PCTs fatal
bec452a3a2 [release-branch.go1.25] crypto/internal/fips140: update frozen module version to "v1.0.0"
57bd28ab7f [release-branch.go1.25] crypto/internal/fips140/ecdsa: make TestingOnlyNewDRBG generic
f75bcffa4a [release-branch.go1.25] os: set full name for Roots created with Root.OpenRoot
7d570090a9 [release-branch.go1.25] os: fix Root.MkdirAll to handle race of directory creation
be61132165 [release-branch.go1.25] cmd/compile: export to DWARF types only referenced through interfaces
a86792b169 [release-branch.go1.25] net: skip TestIPv4WriteMsgUDPAddrPort on plan9
879e3cb5f7 [release-branch.go1.25] runtime: lock mheap_.speciallock when allocating synctest specials
Fixes CVE-2025-61725, CVE-2025-58187, CVE-2025-58189, CVE-2025-61723,
CVE-2025-47912, CVE-2025-58185, CVE-2025-58186, CVE-2025-58188,
CVE-2025-58183 and CVE-2025-61724 [2].
[1] https://github.com/golang/go/compare/go1.25.1...go1.25.2
[2] https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
meta/recipes-devtools/go/{go-1.25.1.inc => go-1.25.2.inc} | 2 +-
...o-binary-native_1.25.1.bb => go-binary-native_1.25.2.bb} | 6 +++---
...cross-canadian_1.25.1.bb => go-cross-canadian_1.25.2.bb} | 0
.../go/{go-cross_1.25.1.bb => go-cross_1.25.2.bb} | 0
.../go/{go-crosssdk_1.25.1.bb => go-crosssdk_1.25.2.bb} | 0
.../go/{go-runtime_1.25.1.bb => go-runtime_1.25.2.bb} | 0
meta/recipes-devtools/go/{go_1.25.1.bb => go_1.25.2.bb} | 0
7 files changed, 4 insertions(+), 4 deletions(-)
rename meta/recipes-devtools/go/{go-1.25.1.inc => go-1.25.2.inc} (91%)
rename meta/recipes-devtools/go/{go-binary-native_1.25.1.bb => go-binary-native_1.25.2.bb} (79%)
rename meta/recipes-devtools/go/{go-cross-canadian_1.25.1.bb => go-cross-canadian_1.25.2.bb} (100%)
rename meta/recipes-devtools/go/{go-cross_1.25.1.bb => go-cross_1.25.2.bb} (100%)
rename meta/recipes-devtools/go/{go-crosssdk_1.25.1.bb => go-crosssdk_1.25.2.bb} (100%)
rename meta/recipes-devtools/go/{go-runtime_1.25.1.bb => go-runtime_1.25.2.bb} (100%)
rename meta/recipes-devtools/go/{go_1.25.1.bb => go_1.25.2.bb} (100%)
diff --git a/meta/recipes-devtools/go/go-1.25.1.inc b/meta/recipes-devtools/go/go-1.25.2.inc
similarity index 91%
rename from meta/recipes-devtools/go/go-1.25.1.inc
rename to meta/recipes-devtools/go/go-1.25.2.inc
index ca36caed0fb..9d1cf696700 100644
--- a/meta/recipes-devtools/go/go-1.25.1.inc
+++ b/meta/recipes-devtools/go/go-1.25.2.inc
@@ -18,4 +18,4 @@ SRC_URI += "\
file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \
file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \
"
-SRC_URI[main.sha256sum] = "d010c109cee94d80efe681eab46bdea491ac906bf46583c32e9f0dbb0bd1a594"
+SRC_URI[main.sha256sum] = "3711140cfb87fce8f7a13f7cd860df041e6c12f7610f40cac6ec6fa2b65e96e4"
diff --git a/meta/recipes-devtools/go/go-binary-native_1.25.1.bb b/meta/recipes-devtools/go/go-binary-native_1.25.2.bb
similarity index 79%
rename from meta/recipes-devtools/go/go-binary-native_1.25.1.bb
rename to meta/recipes-devtools/go/go-binary-native_1.25.2.bb
index f82a23d62fd..fbdef1b695c 100644
--- a/meta/recipes-devtools/go/go-binary-native_1.25.1.bb
+++ b/meta/recipes-devtools/go/go-binary-native_1.25.2.bb
@@ -9,9 +9,9 @@ PROVIDES = "go-native"
# Checksums available at https://go.dev/dl/
SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "7716a0d940a0f6ae8e1f3b3f4f36299dc53e31b16840dbd171254312c41ca12e"
-SRC_URI[go_linux_arm64.sha256sum] = "65a3e34fb2126f55b34e1edfc709121660e1be2dee6bdf405fc399a63a95a87d"
-SRC_URI[go_linux_ppc64le.sha256sum] = "8b0c8d3ee5b1b5c28b6bd63dc4438792012e01d03b4bf7a61d985c87edab7d1f"
+SRC_URI[go_linux_amd64.sha256sum] = "d7fa7f8fbd16263aa2501d681b11f972a5fd8e811f7b10cb9b26d031a3d7454b"
+SRC_URI[go_linux_arm64.sha256sum] = "9aaeb044bf8dbf50ca2fbf0edc5ebc98b90d5bda8c6b2911526df76f61232919"
+SRC_URI[go_linux_ppc64le.sha256sum] = "91dd35ac3f33baa642d9bac22b626bdb5ee0372cf80e7d782994337f81f34417"
UPSTREAM_CHECK_URI = "https://golang.org/dl/"
UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.25.1.bb b/meta/recipes-devtools/go/go-cross-canadian_1.25.2.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross-canadian_1.25.1.bb
rename to meta/recipes-devtools/go/go-cross-canadian_1.25.2.bb
diff --git a/meta/recipes-devtools/go/go-cross_1.25.1.bb b/meta/recipes-devtools/go/go-cross_1.25.2.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross_1.25.1.bb
rename to meta/recipes-devtools/go/go-cross_1.25.2.bb
diff --git a/meta/recipes-devtools/go/go-crosssdk_1.25.1.bb b/meta/recipes-devtools/go/go-crosssdk_1.25.2.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-crosssdk_1.25.1.bb
rename to meta/recipes-devtools/go/go-crosssdk_1.25.2.bb
diff --git a/meta/recipes-devtools/go/go-runtime_1.25.1.bb b/meta/recipes-devtools/go/go-runtime_1.25.2.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-runtime_1.25.1.bb
rename to meta/recipes-devtools/go/go-runtime_1.25.2.bb
diff --git a/meta/recipes-devtools/go/go_1.25.1.bb b/meta/recipes-devtools/go/go_1.25.2.bb
similarity index 100%
rename from meta/recipes-devtools/go/go_1.25.1.bb
rename to meta/recipes-devtools/go/go_1.25.2.bb
q
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2025-10-07 20:13 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-10-07 20:13 [OE-core][PATCH 1/2] go: upgrade 1.25.0 -> 1.25.1 Peter Marko
2025-10-07 20:13 ` [OE-core][PATCH 2/2] go: upgrade 1.25.1 -> 1.25.2 Peter Marko
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox