From a452cf034323772b26b3779173ddb900cac8da77 Mon Sep 17 00:00:00 2001 From: Jeffery To Date: Mon, 12 Jun 2023 12:25:43 +0800 Subject: [PATCH] golang: Update to 1.19.10 Includes fixes for: * CVE-2023-29402: cmd/go: cgo code injection * CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries * CVE-2023-29404: cmd/go: improper sanitization of LDFLAGS * CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS Signed-off-by: Jeffery To --- lang/golang/golang/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lang/golang/golang/Makefile b/lang/golang/golang/Makefile index 5d998a98c6..58a0fde1d3 100644 --- a/lang/golang/golang/Makefile +++ b/lang/golang/golang/Makefile @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk GO_VERSION_MAJOR_MINOR:=1.19 -GO_VERSION_PATCH:=9 +GO_VERSION_PATCH:=10 PKG_NAME:=golang PKG_VERSION:=$(GO_VERSION_MAJOR_MINOR)$(if $(GO_VERSION_PATCH),.$(GO_VERSION_PATCH)) @@ -20,7 +20,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \ PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz PKG_SOURCE_URL:=$(GO_SOURCE_URLS) -PKG_HASH:=131190a4697a70c5b1d232df5d3f55a3f9ec0e78e40516196ffb3f09ae6a5744 +PKG_HASH:=13755bcce529747d5f2930dee034730c86d02bd3e521ab3e2bbede548d3b953f PKG_MAINTAINER:=Jeffery To PKG_LICENSE:=BSD-3-Clause -- 2.30.2