]> code.ossystems Code Review - openembedded-core.git/commitdiff
go: upgrade 1.16.8 -> 1.16.10
authorPavel Zhukov <pavel.zhukov@huawei.com>
Wed, 24 Nov 2021 20:08:55 +0000 (15:08 -0500)
committerAnuj Mittal <anuj.mittal@intel.com>
Mon, 29 Nov 2021 04:38:59 +0000 (12:38 +0800)
The release includes fixes for CVE-2021-41771 and CVE-2021-41772

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This release also contains a fix for CVE-2021-38297 and the changes are
minor, so backport the uprev rather than manually backporting individual
commits.

CVE: CVE-2021-38297

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-devtools/go/go-1.16.10.inc [moved from meta/recipes-devtools/go/go-1.16.8.inc with 86% similarity]
meta/recipes-devtools/go/go-binary-native_1.16.10.bb [moved from meta/recipes-devtools/go/go-binary-native_1.16.8.bb with 83% similarity]
meta/recipes-devtools/go/go-cross-canadian_1.16.10.bb [moved from meta/recipes-devtools/go/go-cross-canadian_1.16.8.bb with 100% similarity]
meta/recipes-devtools/go/go-cross_1.16.10.bb [moved from meta/recipes-devtools/go/go-cross_1.16.8.bb with 100% similarity]
meta/recipes-devtools/go/go-crosssdk_1.16.10.bb [moved from meta/recipes-devtools/go/go-crosssdk_1.16.8.bb with 100% similarity]
meta/recipes-devtools/go/go-native_1.16.10.bb [moved from meta/recipes-devtools/go/go-native_1.16.8.bb with 100% similarity]
meta/recipes-devtools/go/go-runtime_1.16.10.bb [moved from meta/recipes-devtools/go/go-runtime_1.16.8.bb with 100% similarity]
meta/recipes-devtools/go/go_1.16.10.bb [moved from meta/recipes-devtools/go/go_1.16.8.bb with 100% similarity]

similarity index 86%
rename from meta/recipes-devtools/go/go-1.16.8.inc
rename to meta/recipes-devtools/go/go-1.16.10.inc
index acc2300a2863a4133c8db2fbc97f36dc557ccab3..08c85b275b26e01dbf11fc3d94a9b1200900ff96 100644 (file)
@@ -1,8 +1,8 @@
 require go-common.inc
 
 GO_BASEVERSION = "1.16"
-PV = "1.16.8"
-FILESEXTRAPATHS_prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:"
+PV = "1.16.10"
+FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:"
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707"
 
@@ -18,7 +18,7 @@ SRC_URI += "\
     file://0009-Revert-cmd-go-make-sure-CC-and-CXX-are-absolute.patch \
     file://0001-encoding-xml-handle-leading-trailing-or-double-colon.patch \
 "
-SRC_URI[main.sha256sum] = "8f2a8c24b793375b3243df82fdb0c8387486dcc8a892ca1c991aa99ace086b98"
+SRC_URI[main.sha256sum] = "a905472011585e403d00d2a41de7ced29b8884309d73482a307f689fd0f320b5"
 
 # Upstream don't believe it is a signifiant real world issue and will only
 # fix in 1.17 onwards where we can drop this.
similarity index 83%
rename from meta/recipes-devtools/go/go-binary-native_1.16.8.bb
rename to meta/recipes-devtools/go/go-binary-native_1.16.10.bb
index 926222089d0c3ca51eb4d659bc695cbcc59c66d6..4866c9f847169829ae72520c11a259efbaf3e753 100644 (file)
@@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707"
 PROVIDES = "go-native"
 
 SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "f32501aeb8b7b723bc7215f6c373abb6981bbc7e1c7b44e9f07317e1a300dce2"
-SRC_URI[go_linux_arm64.sha256sum] = "430dbe185417204f6788913197ab3b189b6deae9c9b524f262858e53dab239c2"
+SRC_URI[go_linux_amd64.sha256sum] = "414cd18ce1d193769b9e97d2401ad718755ab47816e13b2a1cde203d263b55cf"
+SRC_URI[go_linux_arm64.sha256sum] = "bfe1d4b82626c742b4690a832ca59a21e3d702161556f3c0ed26dffb368927e9"
 
 UPSTREAM_CHECK_URI = "https://golang.org/dl/"
 UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"