golang: update to version 1.18.8
authorJosef Schlehofer <pepe.schlehofer@gmail.com>
Wed, 9 Nov 2022 13:51:30 +0000 (14:51 +0100)
committerJosef Schlehofer <pepe.schlehofer@gmail.com>
Thu, 10 Nov 2022 08:16:14 +0000 (09:16 +0100)
commit90b2aa9371d0c50b1850c5ddf278ee68be549c5d
treeef72739a121959c20995a88baa5a609d0a4fd89d
parentb4c70db42837b688683c5cf64a37dadc8ef16b84
golang: update to version 1.18.8

Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d886918cfbc1af8d60cbb530ba563084b67)
lang/golang/golang/Makefile
lang/golang/golang/patches/001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch