| Message ID | 20230711221456.1703814-1-christian@aperture.us |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/go: security bump to version 1.19.11 | expand |
On Tue, 11 Jul 2023 15:14:56 -0700 Christian Stewart via buildroot <buildroot@buildroot.org> wrote: > go1.19.11 (released 2023-07-11) includes a security fix to the net/http package, > as well as bug fixes to cgo, the cover tool, the go command, the runtime, and > the go/printer package. > > CVE-2023-29406 and Go issue https://go.dev/issue/60374 > > Signed-off-by: Christian Stewart <christian@aperture.us> > --- > package/go/go.hash | 2 +- > package/go/go.mk | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) Applied to master, thanks. Thomas
>>>>> "Thomas" == Thomas Petazzoni via buildroot <buildroot@buildroot.org> writes: > On Tue, 11 Jul 2023 15:14:56 -0700 > Christian Stewart via buildroot <buildroot@buildroot.org> wrote: >> go1.19.11 (released 2023-07-11) includes a security fix to the net/http package, >> as well as bug fixes to cgo, the cover tool, the go command, the runtime, and >> the go/printer package. >> >> CVE-2023-29406 and Go issue https://go.dev/issue/60374 >> >> Signed-off-by: Christian Stewart <christian@aperture.us> >> --- >> package/go/go.hash | 2 +- >> package/go/go.mk | 2 +- >> 2 files changed, 2 insertions(+), 2 deletions(-) > Applied to master, thanks. Committed to 2023.02.x and 2023.05.x, thanks.
diff --git a/package/go/go.hash b/package/go/go.hash index 874737ea2d..6d4c718a40 100644 --- a/package/go/go.hash +++ b/package/go/go.hash @@ -1,3 +1,3 @@ # From https://go.dev/dl -sha256 13755bcce529747d5f2930dee034730c86d02bd3e521ab3e2bbede548d3b953f go1.19.10.src.tar.gz +sha256 e25c9ab72d811142b7f41ff6da5165fec2d1be5feec3ef2c66bc0bdecb431489 go1.19.11.src.tar.gz sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE diff --git a/package/go/go.mk b/package/go/go.mk index 545d2117b7..22b8161e05 100644 --- a/package/go/go.mk +++ b/package/go/go.mk @@ -4,7 +4,7 @@ # ################################################################################ -GO_VERSION = 1.19.10 +GO_VERSION = 1.19.11 GO_SITE = https://storage.googleapis.com/golang GO_SOURCE = go$(GO_VERSION).src.tar.gz
go1.19.11 (released 2023-07-11) includes a security fix to the net/http package, as well as bug fixes to cgo, the cover tool, the go command, the runtime, and the go/printer package. CVE-2023-29406 and Go issue https://go.dev/issue/60374 Signed-off-by: Christian Stewart <christian@aperture.us> --- package/go/go.hash | 2 +- package/go/go.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)