From 0df36f324a2dc17f18066efc5c130231158b5d24 Mon Sep 17 00:00:00 2001 From: Pavel Zhukov Date: Wed, 24 Nov 2021 15:08:55 -0500 Subject: [PATCH] go: upgrade 1.16.8 -> 1.16.10 The release includes fixes for CVE-2021-41771 and CVE-2021-41772 Signed-off-by: Pavel Zhukov Signed-off-by: Richard Purdie This release also contains a fix for CVE-2021-38297 and the changes are minor, so backport the uprev rather than manually backporting individual commits. CVE: CVE-2021-38297 Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal --- meta/recipes-devtools/go/{go-1.16.8.inc => go-1.16.10.inc} | 6 +++--- ...-binary-native_1.16.8.bb => go-binary-native_1.16.10.bb} | 4 ++-- ...ross-canadian_1.16.8.bb => go-cross-canadian_1.16.10.bb} | 0 .../go/{go-cross_1.16.8.bb => go-cross_1.16.10.bb} | 0 .../go/{go-crosssdk_1.16.8.bb => go-crosssdk_1.16.10.bb} | 0 .../go/{go-native_1.16.8.bb => go-native_1.16.10.bb} | 0 .../go/{go-runtime_1.16.8.bb => go-runtime_1.16.10.bb} | 0 meta/recipes-devtools/go/{go_1.16.8.bb => go_1.16.10.bb} | 0 8 files changed, 5 insertions(+), 5 deletions(-) rename meta/recipes-devtools/go/{go-1.16.8.inc => go-1.16.10.inc} (86%) rename meta/recipes-devtools/go/{go-binary-native_1.16.8.bb => go-binary-native_1.16.10.bb} (83%) rename meta/recipes-devtools/go/{go-cross-canadian_1.16.8.bb => go-cross-canadian_1.16.10.bb} (100%) rename meta/recipes-devtools/go/{go-cross_1.16.8.bb => go-cross_1.16.10.bb} (100%) rename meta/recipes-devtools/go/{go-crosssdk_1.16.8.bb => go-crosssdk_1.16.10.bb} (100%) rename meta/recipes-devtools/go/{go-native_1.16.8.bb => go-native_1.16.10.bb} (100%) rename meta/recipes-devtools/go/{go-runtime_1.16.8.bb => go-runtime_1.16.10.bb} (100%) rename meta/recipes-devtools/go/{go_1.16.8.bb => go_1.16.10.bb} (100%) diff --git a/meta/recipes-devtools/go/go-1.16.8.inc b/meta/recipes-devtools/go/go-1.16.10.inc similarity index 86% rename from meta/recipes-devtools/go/go-1.16.8.inc rename to meta/recipes-devtools/go/go-1.16.10.inc index acc2300a28..08c85b275b 100644 --- a/meta/recipes-devtools/go/go-1.16.8.inc +++ b/meta/recipes-devtools/go/go-1.16.10.inc @@ -1,8 +1,8 @@ require go-common.inc GO_BASEVERSION = "1.16" -PV = "1.16.8" -FILESEXTRAPATHS_prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:" +PV = "1.16.10" +FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-${GO_BASEVERSION}:" LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" @@ -18,7 +18,7 @@ SRC_URI += "\ file://0009-Revert-cmd-go-make-sure-CC-and-CXX-are-absolute.patch \ file://0001-encoding-xml-handle-leading-trailing-or-double-colon.patch \ " -SRC_URI[main.sha256sum] = "8f2a8c24b793375b3243df82fdb0c8387486dcc8a892ca1c991aa99ace086b98" +SRC_URI[main.sha256sum] = "a905472011585e403d00d2a41de7ced29b8884309d73482a307f689fd0f320b5" # Upstream don't believe it is a signifiant real world issue and will only # fix in 1.17 onwards where we can drop this. diff --git a/meta/recipes-devtools/go/go-binary-native_1.16.8.bb b/meta/recipes-devtools/go/go-binary-native_1.16.10.bb similarity index 83% rename from meta/recipes-devtools/go/go-binary-native_1.16.8.bb rename to meta/recipes-devtools/go/go-binary-native_1.16.10.bb index 926222089d..4866c9f847 100644 --- a/meta/recipes-devtools/go/go-binary-native_1.16.8.bb +++ b/meta/recipes-devtools/go/go-binary-native_1.16.10.bb @@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" PROVIDES = "go-native" SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}" -SRC_URI[go_linux_amd64.sha256sum] = "f32501aeb8b7b723bc7215f6c373abb6981bbc7e1c7b44e9f07317e1a300dce2" -SRC_URI[go_linux_arm64.sha256sum] = "430dbe185417204f6788913197ab3b189b6deae9c9b524f262858e53dab239c2" +SRC_URI[go_linux_amd64.sha256sum] = "414cd18ce1d193769b9e97d2401ad718755ab47816e13b2a1cde203d263b55cf" +SRC_URI[go_linux_arm64.sha256sum] = "bfe1d4b82626c742b4690a832ca59a21e3d702161556f3c0ed26dffb368927e9" UPSTREAM_CHECK_URI = "https://golang.org/dl/" UPSTREAM_CHECK_REGEX = "go(?P\d+(\.\d+)+)\.linux" diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.16.8.bb b/meta/recipes-devtools/go/go-cross-canadian_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross-canadian_1.16.8.bb rename to meta/recipes-devtools/go/go-cross-canadian_1.16.10.bb diff --git a/meta/recipes-devtools/go/go-cross_1.16.8.bb b/meta/recipes-devtools/go/go-cross_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross_1.16.8.bb rename to meta/recipes-devtools/go/go-cross_1.16.10.bb diff --git a/meta/recipes-devtools/go/go-crosssdk_1.16.8.bb b/meta/recipes-devtools/go/go-crosssdk_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go-crosssdk_1.16.8.bb rename to meta/recipes-devtools/go/go-crosssdk_1.16.10.bb diff --git a/meta/recipes-devtools/go/go-native_1.16.8.bb b/meta/recipes-devtools/go/go-native_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go-native_1.16.8.bb rename to meta/recipes-devtools/go/go-native_1.16.10.bb diff --git a/meta/recipes-devtools/go/go-runtime_1.16.8.bb b/meta/recipes-devtools/go/go-runtime_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go-runtime_1.16.8.bb rename to meta/recipes-devtools/go/go-runtime_1.16.10.bb diff --git a/meta/recipes-devtools/go/go_1.16.8.bb b/meta/recipes-devtools/go/go_1.16.10.bb similarity index 100% rename from meta/recipes-devtools/go/go_1.16.8.bb rename to meta/recipes-devtools/go/go_1.16.10.bb -- 2.40.1