golang: Update to 1.13.15

This includes a fix for CVE-2020-16845 (encoding/binary: ReadUvarint and
ReadVarint can read an unlimited number of bytes from invalid inputs).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

diff --git a/lang/golang/golang-version.mk b/lang/golang/golang-version.mk
index 90c1b0f1bc9fe045e713c6cc6fc2fc271a34e994..f3bd0957a6226dde0b3357f67c368decf95030f0 100644 (file)
--- a/lang/golang/golang-version.mk
+++ b/lang/golang/golang-version.mk
@@ -11,4 +11,4 @@ endif
 
 
 GO_VERSION_MAJOR_MINOR:=1.13
-GO_VERSION_PATCH:=14
+GO_VERSION_PATCH:=15

diff --git a/lang/golang/golang/Makefile b/lang/golang/golang/Makefile
index 9fbc06f5a3336aa98f5054eeb7e8d8a2598b2856..c4857fc2990c2a6309d8efd27378030ae7aff435 100644 (file)
--- a/lang/golang/golang/Makefile
+++ b/lang/golang/golang/Makefile
@@ -18,7 +18,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \
 
 PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz
 PKG_SOURCE_URL:=$(GO_SOURCE_URLS)
-PKG_HASH:=197333e97290e9ea8796f738d61019dcba1c377c2f3961fd6a114918ecc7ab06
+PKG_HASH:=5fb43171046cf8784325e67913d55f88a683435071eef8e9da1aa8a1588fcf5d
 
 PKG_MAINTAINER:=Jeffery To <jeffery.to@gmail.com>
 PKG_LICENSE:=BSD-3-Clause