diff mbox series

[1/1] package/go: security bump to go1.22.2

Message ID 20240403195549.2445-1-christian@aperture.us
State Accepted
Headers show
Series [1/1] package/go: security bump to go1.22.2 | expand

Commit Message

Christian Stewart April 3, 2024, 7:55 p.m. UTC
CVE-2023-45288: http2: close connections when receiving too many headers

https://go.dev/doc/devel/release#go1.22.2

Signed-off-by: Christian Stewart <christian@aperture.us>
---
 package/go/go.hash | 2 +-
 package/go/go.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Comments

Peter Korsgaard April 4, 2024, 2:22 p.m. UTC | #1
>>>>> "Christian" == Christian Stewart <christian@aperture.us> writes:

 > CVE-2023-45288: http2: close connections when receiving too many headers
 > https://go.dev/doc/devel/release#go1.22.2

 > Signed-off-by: Christian Stewart <christian@aperture.us>

Committed, thanks.
diff mbox series

Patch

diff --git a/package/go/go.hash b/package/go/go.hash
index 06d8776db2..81bd14baa8 100644
--- a/package/go/go.hash
+++ b/package/go/go.hash
@@ -1,3 +1,3 @@ 
 # From https://go.dev/dl
-sha256  79c9b91d7f109515a25fc3ecdaad125d67e6bdb54f6d4d98580f46799caea321  go1.22.1.src.tar.gz
+sha256  374ea82b289ec738e968267cac59c7d5ff180f9492250254784b2044e90df5a9  go1.22.2.src.tar.gz
 sha256  2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067  LICENSE
diff --git a/package/go/go.mk b/package/go/go.mk
index a8ec5d95a0..0e39ad9f8c 100644
--- a/package/go/go.mk
+++ b/package/go/go.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-GO_VERSION = 1.22.1
+GO_VERSION = 1.22.2
 GO_SITE = https://storage.googleapis.com/golang
 GO_SOURCE = go$(GO_VERSION).src.tar.gz