All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH-2018.02.x] package/go: security bump to version 1.9.7
@ 2018-12-15 17:22 Peter Korsgaard
  2018-12-16 21:57 ` Peter Korsgaard
  0 siblings, 1 reply; 2+ messages in thread
From: Peter Korsgaard @ 2018-12-15 17:22 UTC (permalink / raw)
  To: buildroot

go1.9.1 (released 2017/10/04) includes two security fixes.

go1.9.2 (released 2017/10/25) includes fixes to the compiler, linker,
runtime, documentation, go command, and the crypto/x509, database/sql, log,
and net/smtp packages.  It includes a fix to a bug introduced in Go 1.9.1
that broke go get of non-Git repositories under certain conditions.

go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime, and
the database/sql, math/big, net/http, and net/url packages.

go1.9.4 (released 2018/02/07) includes a security fix to ?go get?.

go1.9.5 (released 2018/03/28) includes fixes to the compiler, go command,
and net/http/pprof package.

go1.9.6 (released 2018/05/01) includes fixes to the compiler and go command.

go1.9.7 (released 2018/06/05) includes fixes to the go command, and the
crypto/x509, and strings packages.  In particular, it adds minimal support
to the go command for the vgo transition.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/go/go.hash | 2 +-
 package/go/go.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/go/go.hash b/package/go/go.hash
index 445a0b7c20..ad14cd6393 100644
--- a/package/go/go.hash
+++ b/package/go/go.hash
@@ -1,2 +1,2 @@
 # From https://golang.org/dl/
-sha256	a4ab229028ed167ba1986825751463605264e44868362ca8e7accc8be057e993	go1.9.src.tar.gz
+sha256	582814fa45e8ecb0859a208e517b48aa0ad951e3b36c7fff203d834e0ef27722	go1.9.7.src.tar.gz
diff --git a/package/go/go.mk b/package/go/go.mk
index 23facbdd81..811e68fd49 100644
--- a/package/go/go.mk
+++ b/package/go/go.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-GO_VERSION = 1.9
+GO_VERSION = 1.9.7
 GO_SITE = https://storage.googleapis.com/golang
 GO_SOURCE = go$(GO_VERSION).src.tar.gz
 
-- 
2.11.0

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [Buildroot] [PATCH-2018.02.x] package/go: security bump to version 1.9.7
  2018-12-15 17:22 [Buildroot] [PATCH-2018.02.x] package/go: security bump to version 1.9.7 Peter Korsgaard
@ 2018-12-16 21:57 ` Peter Korsgaard
  0 siblings, 0 replies; 2+ messages in thread
From: Peter Korsgaard @ 2018-12-16 21:57 UTC (permalink / raw)
  To: buildroot

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > go1.9.1 (released 2017/10/04) includes two security fixes.
 > go1.9.2 (released 2017/10/25) includes fixes to the compiler, linker,
 > runtime, documentation, go command, and the crypto/x509, database/sql, log,
 > and net/smtp packages.  It includes a fix to a bug introduced in Go 1.9.1
 > that broke go get of non-Git repositories under certain conditions.

 > go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime, and
 > the database/sql, math/big, net/http, and net/url packages.

 > go1.9.4 (released 2018/02/07) includes a security fix to ?go get?.

 > go1.9.5 (released 2018/03/28) includes fixes to the compiler, go command,
 > and net/http/pprof package.

 > go1.9.6 (released 2018/05/01) includes fixes to the compiler and go command.

 > go1.9.7 (released 2018/06/05) includes fixes to the go command, and the
 > crypto/x509, and strings packages.  In particular, it adds minimal support
 > to the go command for the vgo transition.

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed to 2018.02.x, thanks.

-- 
Bye, Peter Korsgaard

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2018-12-16 21:57 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-12-15 17:22 [Buildroot] [PATCH-2018.02.x] package/go: security bump to version 1.9.7 Peter Korsgaard
2018-12-16 21:57 ` Peter Korsgaard

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.