From 53716828cfad5b9fe51d9edc6e4a351601f0f152 Mon Sep 17 00:00:00 2001 From: Christian Stewart Date: Tue, 1 Nov 2022 15:15:37 -0700 Subject: [PATCH] package/go: security bump to go 1.19.3 go1.19.3 (released 2022-11-01) includes security fixes to the os/exec and syscall packages, as well as bug fixes to the compiler and the runtime. Fixes: CVE-2022-41716 NOTE: this CVE is specific to Windows and is not directly relevant to Buildroot. https://go.dev/doc/devel/release#go1.19 https://github.com/golang/go/issues?q=milestone%3AGo1.19.3+label%3ACherryPickApproved Signed-off-by: Christian Stewart Signed-off-by: Thomas Petazzoni --- package/go/go.hash | 2 +- package/go/go.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/go/go.hash b/package/go/go.hash index f944bd5304..866e7e0d59 100644 --- a/package/go/go.hash +++ b/package/go/go.hash @@ -1,3 +1,3 @@ # From https://go.dev/dl -sha256 2ce930d70a931de660fdaf271d70192793b1b240272645bf0275779f6704df6b go1.19.2.src.tar.gz +sha256 18ac263e39210bcf68d85f4370e97fb1734166995a1f63fb38b4f6e07d90d212 go1.19.3.src.tar.gz sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE diff --git a/package/go/go.mk b/package/go/go.mk index fe4d3a29a9..fd4caa2e5a 100644 --- a/package/go/go.mk +++ b/package/go/go.mk @@ -4,7 +4,7 @@ # ################################################################################ -GO_VERSION = 1.19.2 +GO_VERSION = 1.19.3 GO_SITE = https://storage.googleapis.com/golang GO_SOURCE = go$(GO_VERSION).src.tar.gz