2019-09-30 10:41:22 -04:00
%global debug_package %{nil}
%global _binaries_in_noarch_packages_terminate_build 0
2019-12-13 15:19:17 +08:00
%global golibdir %{_libdir} /golang
%global goroot /usr/lib/%{name}
2021-11-21 03:33:14 +08:00
%global go_api 1.17
%global go_version 1.17
2019-12-13 15:19:17 +08:00
%global __spec_install_post /usr/lib/rpm/check-rpaths /usr/lib/rpm/check-buildroot /usr/lib/rpm/brp-compress
2019-09-30 10:41:22 -04:00
%global __requires_exclude_from ^(%{_datadir} |/usr/lib)/%{name} /(doc|src)/.*$
%global __strip /bin/true
%define _use_internal_dependency_generator 0
%define __find_requires %{nil}
2019-12-13 15:19:17 +08:00
%bcond_with bootstrap
2020-11-28 13:20:11 +08:00
%ifarch x86_64 aarch64 riscv64
2019-12-13 15:19:17 +08:00
%bcond_without ignore_tests
%else
%bcond_with ignore_tests
%endif
2019-09-30 10:41:22 -04:00
2020-11-28 13:20:11 +08:00
%ifarch x86_64 aarch64 riscv64
2019-09-30 10:41:22 -04:00
%global external_linker 1
%else
%global external_linker 0
%endif
2020-11-28 13:20:11 +08:00
%ifarch x86_64 aarch64 riscv64
2019-09-30 10:41:22 -04:00
%global cgo_enabled 1
%else
%global cgo_enabled 0
%endif
%if %{with bootstrap}
%global golang_bootstrap 0
%else
%global golang_bootstrap 1
%endif
%if %{with ignore_tests}
%global fail_on_tests 0
%else
%global fail_on_tests 1
%endif
%ifarch x86_64 aarch64
%global shared 1
%else
%global shared 0
%endif
%ifarch x86_64
%global race 1
%else
%global race 0
%endif
%ifarch x86_64
2019-12-13 15:19:17 +08:00
%global gohostarch amd64
2019-09-30 10:41:22 -04:00
%endif
%ifarch aarch64
2019-12-13 15:19:17 +08:00
%global gohostarch arm64
2019-09-30 10:41:22 -04:00
%endif
2020-11-28 13:20:11 +08:00
%ifarch riscv64
%global gohostarch riscv64
%endif
2019-09-30 10:41:22 -04:00
Name : golang
2021-11-21 03:33:14 +08:00
Version : 1.17.3
2022-08-18 17:48:04 +08:00
Release : 7
2019-09-30 10:41:22 -04:00
Summary : The Go Programming Language
License : BSD and Public Domain
2020-07-30 16:01:33 +08:00
URL : https://golang.org/
2021-11-21 03:33:14 +08:00
Source0 : https://dl.google.com/go/go1.17.3.src.tar.gz
2019-09-30 10:41:22 -04:00
%if !%{golang_bootstrap}
BuildRequires : gcc-go >= 5
%else
BuildRequires : golang > 1.4
%endif
BuildRequires : hostname
# for tests
BuildRequires : pcre-devel, glibc-static, perl-interpreter, procps-ng
Provides : go = %{version} -%{release}
Requires : %{name} -devel = %{version} -%{release}
2019-12-13 15:19:17 +08:00
2019-09-30 10:41:22 -04:00
Obsoletes : %{name} -pkg-bin-linux-386 < 1.4.99
Obsoletes : %{name} -pkg-bin-linux-amd64 < 1.4.99
Obsoletes : %{name} -pkg-bin-linux-arm < 1.4.99
Obsoletes : %{name} -pkg-linux-386 < 1.4.99
Obsoletes : %{name} -pkg-linux-amd64 < 1.4.99
Obsoletes : %{name} -pkg-linux-arm < 1.4.99
2019-12-13 15:19:17 +08:00
Obsoletes : %{name} -vet < 0-12.1
Obsoletes : %{name} -cover < 0-12.1
2019-09-30 10:41:22 -04:00
Requires(post) : %{_sbindir} /update-alternatives
Requires(postun) : %{_sbindir} /update-alternatives
2020-02-20 18:22:53 +08:00
Requires : glibc gcc git subversion
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
# generated by:
2019-09-30 10:41:22 -04:00
# go list -f {{.ImportPath}} ./src/vendor/... | sed "s:_$PWD/src/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):" && go list -f {{.ImportPath}} ./src/cmd/vendor/... | sed "s:_$PWD/src/cmd/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):"
Provides : bundled(golang(golang.org/x/crypto/chacha20poly1305))
Provides : bundled(golang(golang.org/x/crypto/cryptobyte))
Provides : bundled(golang(golang.org/x/crypto/cryptobyte/asn1))
Provides : bundled(golang(golang.org/x/crypto/curve25519))
Provides : bundled(golang(golang.org/x/crypto/internal/chacha20))
Provides : bundled(golang(golang.org/x/crypto/poly1305))
Provides : bundled(golang(golang.org/x/net/dns/dnsmessage))
Provides : bundled(golang(golang.org/x/net/http/httpguts))
Provides : bundled(golang(golang.org/x/net/http/httpproxy))
Provides : bundled(golang(golang.org/x/net/http2/hpack))
Provides : bundled(golang(golang.org/x/net/idna))
Provides : bundled(golang(golang.org/x/net/internal/nettest))
Provides : bundled(golang(golang.org/x/net/nettest))
Provides : bundled(golang(golang.org/x/text/secure))
Provides : bundled(golang(golang.org/x/text/secure/bidirule))
Provides : bundled(golang(golang.org/x/text/transform))
Provides : bundled(golang(golang.org/x/text/unicode))
Provides : bundled(golang(golang.org/x/text/unicode/bidi))
Provides : bundled(golang(golang.org/x/text/unicode/norm))
Provides : bundled(golang(github.com/google/pprof/driver))
Provides : bundled(golang(github.com/google/pprof/internal/binutils))
Provides : bundled(golang(github.com/google/pprof/internal/driver))
Provides : bundled(golang(github.com/google/pprof/internal/elfexec))
Provides : bundled(golang(github.com/google/pprof/internal/graph))
Provides : bundled(golang(github.com/google/pprof/internal/measurement))
Provides : bundled(golang(github.com/google/pprof/internal/plugin))
Provides : bundled(golang(github.com/google/pprof/internal/proftest))
Provides : bundled(golang(github.com/google/pprof/internal/report))
Provides : bundled(golang(github.com/google/pprof/internal/symbolizer))
Provides : bundled(golang(github.com/google/pprof/internal/symbolz))
Provides : bundled(golang(github.com/google/pprof/profile))
Provides : bundled(golang(github.com/google/pprof/third.party/d3))
Provides : bundled(golang(github.com/google/pprof/third.party/d3flamegraph))
Provides : bundled(golang(github.com/google/pprof/third.party/svgpan))
Provides : bundled(golang(github.com/ianlancetaylor/demangle))
Provides : bundled(golang(golang.org/x/arch/arm/armasm))
Provides : bundled(golang(golang.org/x/arch/arm64/arm64asm))
Provides : bundled(golang(golang.org/x/arch/ppc64/ppc64asm))
Provides : bundled(golang(golang.org/x/arch/x86/x86asm))
Provides : bundled(golang(golang.org/x/crypto/ssh/terminal))
Provides : bundled(golang(golang.org/x/sys/unix))
Provides : bundled(golang(golang.org/x/sys/windows))
Provides : bundled(golang(golang.org/x/sys/windows/registry))
2019-12-13 15:19:17 +08:00
2019-09-30 10:41:22 -04:00
Provides : %{name} -bin = %{version} -%{release}
Obsoletes : %{name} -bin
Obsoletes : %{name} -shared
Obsoletes : %{name} -docs
Obsoletes : %{name} -data < 1.1.1-4
Obsoletes : %{name} -vim < 1.4
Obsoletes : emacs-%{name} < 1.4
2019-12-13 15:19:17 +08:00
Requires : openEuler-rpm-config
2022-05-11 10:39:20 +08:00
Patch6001 : 0001-release-branch.go1.17-crypto-elliptic-tolerate-zero-.patch
Patch6002 : 0002-release-branch.go1.17-encoding-pem-fix-stack-overflo.patch
2022-05-16 15:29:26 +08:00
Patch6003 : 0003-release-branch.go1.17-syscall-fix-ForkLock-spurious-.patch
2022-06-28 19:16:14 +08:00
Patch6004 : 0004-backport-cmd-link-mark-unexported-methods-for-plugins.patch
golang: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
Conflict: NA
Score:
CVE-2022-32148: 5.3
CVE-2022-1962: 6.2
CVE-2022-1705: 5.3
CVE-2022-30633: 6.2
CVE-2022-30635: 5.5
CVE-2022-30630: 6.2
CVE-2022-30632: 6.2
CVE-2022-28131: 6.2
CVE-2022-30631: 7.5
CVE-2022-30629: 2.6
CVE-2022-30634: 7.5
Reference:
CVE-2022-32148: https://go-review.googlesource.com/c/go/+/415221
CVE-2022-1962: https://go-review.googlesource.com/c/go/+/417070
CVE-2022-1705: https://go-review.googlesource.com/c/go/+/415217
CVE-2022-30633: https://go-review.googlesource.com/c/go/+/417069
CVE-2022-30635: https://go-review.googlesource.com/c/go/+/417074
CVE-2022-30630: https://go-review.googlesource.com/c/go/+/417072
CVE-2022-30632: https://go-review.googlesource.com/c/go/+/417073
CVE-2022-28131: https://go-review.googlesource.com/c/go/+/417068
CVE-2022-30631: https://go-review.googlesource.com/c/go/+/417071
CVE-2022-30629: https://go-review.googlesource.com/c/go/+/408574
CVE-2022-30634: https://go-review.googlesource.com/c/go/+/406635
Reason: fix CVE:
CVE-2022-32148: 0005-release-branch.go1.17-net-http-preserve-nil-values-i.patch
CVE-2022-1962: 0006-release-branch.go1.17-go-parser-limit-recursion-dept.patch
CVE-2022-1705: 0007-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
CVE-2022-30633: 0008-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
CVE-2022-30635: 0009-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
CVE-2022-30630: 0010-release-branch.go1.17-io-fs-fix-stack-exhaustion-in-.patch
CVE-2022-30632: 0011-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
CVE-2022-28131: 0012-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
CVE-2022-30631: 0013-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
CVE-2022-30629: 0014-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
CVE-2022-30634: 0015-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-07-26 21:13:25 +08:00
Patch6005 : 0005-release-branch.go1.17-net-http-preserve-nil-values-i.patch
Patch6006 : 0006-release-branch.go1.17-go-parser-limit-recursion-dept.patch
Patch6007 : 0007-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
Patch6008 : 0008-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
Patch6009 : 0009-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
Patch6010 : 0010-release-branch.go1.17-io-fs-fix-stack-exhaustion-in-.patch
Patch6011 : 0011-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
Patch6012 : 0012-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
Patch6013 : 0013-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
Patch6014 : 0014-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
Patch6015 : 0015-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-08-08 17:26:39 +08:00
Patch6016 : 0016-release-branch.go1.17-math-big-check-buffer-lengths-.patch
2022-08-18 17:48:04 +08:00
Patch6017 : 0017-path-filepath-do-not-remove-prefix-.-when-following-.patch
Patch6018 : 0018-release-branch.go1.17-syscall-check-correct-group-in.patch
2020-12-07 15:06:43 +08:00
2022-05-11 10:39:20 +08:00
ExclusiveArch : %{golang_arches}
2019-09-30 10:41:22 -04:00
%description
%{summary} .
%package help
Summary : Golang compiler helps and manual docs
Requires : %{name} = %{version} -%{release}
BuildArch : noarch
Provides : %{name} -docs = %{version} -%{release}
Obsoletes : %{name} -docs
Provides : %{name} -shared = %{version} -%{release}
Obsoletes : %{name} -shared
%description help
%{summary} .
%package devel
Summary : Golang compiler devel
BuildArch : noarch
2019-12-13 15:19:17 +08:00
Requires : %{name} = %{version} -%{release}
2019-09-30 10:41:22 -04:00
Provides : %{name} -src = %{version} -%{release}
Obsoletes : %{name} -src
Provides : %{name} -tests = %{version} -%{release}
Obsoletes : %{name} -tests
Provides : %{name} -misc = %{version} -%{release}
Obsoletes : %{name} -misc
Obsoletes : %{name} -race = %{version} -%{release}
%description devel
%{summary} .
# Workaround old RPM bug of symlink-replaced-with-dir failure
%pretrans -p <lua>
for _,d in pairs({" a p i " , " d o c " , " i n c l u d e " , " l i b " , " s r c " }) do
path = " %{goroot} / " .. d
if posix.stat(path, " t y p e " ) == " l i n k " then
os.remove(path)
posix.mkdir(path)
end
end
%prep
%autosetup -n go -p1
%build
uname -a
cat /proc/cpuinfo
cat /proc/meminfo
%if !%{golang_bootstrap}
export GOROOT_BOOTSTRAP=/
%else
export GOROOT_BOOTSTRAP=%{goroot}
%endif
export GOROOT_FINAL=%{goroot}
export GOHOSTOS=linux
export GOHOSTARCH=%{gohostarch}
pushd src
export CFLAGS=" $RPM_OPT_FLAGS "
export LDFLAGS=" $RPM_LD_FLAGS "
export CC=" g c c "
export CC_FOR_TARGET=" g c c "
export GOOS=linux
export GOARCH=%{gohostarch}
%if !%{external_linker}
export GO_LDFLAGS=" - l i n k m o d e i n t e r n a l "
%endif
%if !%{cgo_enabled}
export CGO_ENABLED=0
%endif
%ifarch aarch64
export GO_LDFLAGS=" - s - w "
%endif
./make.bash --no-clean -v
popd
%if %{shared}
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -buildmode=shared -v -x std
%endif
%if %{race}
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -race -v -x std
%endif
%install
2019-12-13 15:19:17 +08:00
rm -rf %{buildroot}
2019-09-30 10:41:22 -04:00
rm -rf pkg/obj/go-build/*
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{_bindir}
mkdir -p %{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
2021-11-21 03:33:14 +08:00
cp -apv api bin doc lib pkg src misc test VERSION \
2019-12-13 15:19:17 +08:00
%{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
# bz1099206
2019-12-13 15:19:17 +08:00
find %{buildroot} %{goroot} /src -exec touch -r %{buildroot} %{goroot} /VERSION " { } " \;
2019-09-30 10:41:22 -04:00
# and level out all the built archives
2019-12-13 15:19:17 +08:00
touch %{buildroot} %{goroot} /pkg
find %{buildroot} %{goroot} /pkg -exec touch -r %{buildroot} %{goroot} /pkg " { } " \;
2019-09-30 10:41:22 -04:00
# generate the spec file ownership of this source tree and packages
cwd=$(pwd)
src_list=$cwd/go-src.list
pkg_list=$cwd/go-pkg.list
shared_list=$cwd/go-shared.list
race_list=$cwd/go-race.list
misc_list=$cwd/go-misc.list
docs_list=$cwd/go-docs.list
tests_list=$cwd/go-tests.list
rm -f $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
touch $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
2019-12-13 15:19:17 +08:00
pushd %{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
find src/ -type d -a \( ! -name testdata -a ! -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $src_list
find src/ ! -type d -a \( ! -ipath '*/testdata/*' -a ! -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $src_list
find bin/ pkg/ -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%%%dir %{goroot}/%p\n' >> $pkg_list
find bin/ pkg/ ! -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%{goroot}/%p\n' >> $pkg_list
find doc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $docs_list
find doc/ ! -type d -printf '%{goroot}/%p\n' >> $docs_list
find misc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $misc_list
find misc/ ! -type d -printf '%{goroot}/%p\n' >> $misc_list
%if %{shared}
mkdir -p %{buildroot} /%{_libdir} /
mkdir -p %{buildroot} /%{golibdir} /
for file in $(find . -iname " * . s o " ); do
chmod 755 $file
mv $file %{buildroot} /%{golibdir}
pushd $(dirname $file)
ln -fs %{golibdir} /$(basename $file) $(basename $file)
popd
echo " % %{goroot} / $ f i l e " >> $shared_list
echo " % %{golibdir} / $ ( b a s e n a m e $ f i l e ) " >> $shared_list
done
find pkg/*_dynlink/ -type d -printf '%%%dir %{goroot}/%p\n' >> $shared_list
find pkg/*_dynlink/ ! -type d -printf '%{goroot}/%p\n' >> $shared_list
%endif
%if %{race}
find pkg/*_race/ -type d -printf '%%%dir %{goroot}/%p\n' >> $race_list
find pkg/*_race/ ! -type d -printf '%{goroot}/%p\n' >> $race_list
%endif
find test/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find test/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
find src/ -type d -a \( -name testdata -o -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find src/ ! -type d -a \( -ipath '*/testdata/*' -o -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $tests_list
# this is only the zoneinfo.zip
find lib/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find lib/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
popd
2019-12-13 15:19:17 +08:00
rm -rfv %{buildroot} %{goroot} /doc/Makefile
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{goroot} /bin/linux_%{gohostarch}
ln -sf %{goroot} /bin/go %{buildroot} %{goroot} /bin/linux_%{gohostarch} /go
ln -sf %{goroot} /bin/gofmt %{buildroot} %{goroot} /bin/linux_%{gohostarch} /gofmt
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{gopath} /src/github.com
mkdir -p %{buildroot} %{gopath} /src/bitbucket.org
mkdir -p %{buildroot} %{gopath} /src/code.google.com/p
mkdir -p %{buildroot} %{gopath} /src/golang.org/x
2019-09-30 10:41:22 -04:00
%check
export GOROOT=$(pwd -P)
export PATH=" $ G O R O O T " /bin:" $ P A T H "
cd src
export CC=" g c c "
export CFLAGS=" $RPM_OPT_FLAGS "
export LDFLAGS=" $RPM_LD_FLAGS "
%if !%{external_linker}
export GO_LDFLAGS=" - l i n k m o d e i n t e r n a l "
%endif
%if !%{cgo_enabled} || !%{external_linker}
export CGO_ENABLED=0
%endif
export GO_TEST_TIMEOUT_SCALE=2
%if %{fail_on_tests}
echo tests ignored
%else
2021-04-15 15:40:15 +08:00
./run.bash --no-rebuild -v -v -v -k go_test:testing || :
2019-09-30 10:41:22 -04:00
%endif
cd ..
%post
%{_sbindir} /update-alternatives --install %{_bindir} /go \
go %{goroot} /bin/go 90 \
--slave %{_bindir} /gofmt gofmt %{goroot} /bin/gofmt
%preun
if [ $1 = 0 ]; then
%{_sbindir} /update-alternatives --remove go %{goroot} /bin/go
fi
%files -f go-pkg.list
%doc AUTHORS CONTRIBUTORS LICENSE PATENTS
%doc %{goroot} /VERSION
%dir %{goroot} /doc
%doc %{goroot} /doc/*
%dir %{goroot}
%exclude %{goroot} /src/
%exclude %{goroot} /doc/
%exclude %{goroot} /misc/
%exclude %{goroot} /test/
%{goroot} /*
%dir %{gopath}
%dir %{gopath} /src
%dir %{gopath} /src/github.com/
%dir %{gopath} /src/bitbucket.org/
%dir %{gopath} /src/code.google.com/
%dir %{gopath} /src/code.google.com/p/
%dir %{gopath} /src/golang.org
%dir %{gopath} /src/golang.org/x
2020-11-28 13:20:11 +08:00
%if %{shared}
2019-09-30 10:41:22 -04:00
%files help -f go-docs.list -f go-shared.list
2020-11-28 13:20:11 +08:00
%endif
2019-09-30 10:41:22 -04:00
%files devel -f go-tests.list -f go-misc.list -f go-src.list
%changelog
2022-08-18 17:48:04 +08:00
* Thu Aug 18 2022 hanchao <hanchao47@huawei.com> - 1.17.3-7
- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526
2022-08-08 17:26:39 +08:00
* Mon Aug 8 2022 hanchao <hanchao47@huawei.com> - 1.17.3-6
- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189
golang: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
Conflict: NA
Score:
CVE-2022-32148: 5.3
CVE-2022-1962: 6.2
CVE-2022-1705: 5.3
CVE-2022-30633: 6.2
CVE-2022-30635: 5.5
CVE-2022-30630: 6.2
CVE-2022-30632: 6.2
CVE-2022-28131: 6.2
CVE-2022-30631: 7.5
CVE-2022-30629: 2.6
CVE-2022-30634: 7.5
Reference:
CVE-2022-32148: https://go-review.googlesource.com/c/go/+/415221
CVE-2022-1962: https://go-review.googlesource.com/c/go/+/417070
CVE-2022-1705: https://go-review.googlesource.com/c/go/+/415217
CVE-2022-30633: https://go-review.googlesource.com/c/go/+/417069
CVE-2022-30635: https://go-review.googlesource.com/c/go/+/417074
CVE-2022-30630: https://go-review.googlesource.com/c/go/+/417072
CVE-2022-30632: https://go-review.googlesource.com/c/go/+/417073
CVE-2022-28131: https://go-review.googlesource.com/c/go/+/417068
CVE-2022-30631: https://go-review.googlesource.com/c/go/+/417071
CVE-2022-30629: https://go-review.googlesource.com/c/go/+/408574
CVE-2022-30634: https://go-review.googlesource.com/c/go/+/406635
Reason: fix CVE:
CVE-2022-32148: 0005-release-branch.go1.17-net-http-preserve-nil-values-i.patch
CVE-2022-1962: 0006-release-branch.go1.17-go-parser-limit-recursion-dept.patch
CVE-2022-1705: 0007-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
CVE-2022-30633: 0008-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
CVE-2022-30635: 0009-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
CVE-2022-30630: 0010-release-branch.go1.17-io-fs-fix-stack-exhaustion-in-.patch
CVE-2022-30632: 0011-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
CVE-2022-28131: 0012-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
CVE-2022-30631: 0013-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
CVE-2022-30629: 0014-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
CVE-2022-30634: 0015-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-07-26 21:13:25 +08:00
* Tue Jul 26 2022 hanchao <hanchao47@huawei.com> - 1.17.3-5
- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
2022-06-28 19:16:14 +08:00
* Tue Jun 28 2022 Bin Hu <hubin73@huawei.com> - 1.17.3-4
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport patch to fix bug of golang plugin mode
2022-05-16 07:56:24 +00:00
* Fri May 6 2022 hanchao <hanchao47@huawei.com> - 1.17.3-3
2022-05-16 15:29:26 +08:00
- Type:CVE
- CVE:CVE-2021-44717
- SUG:NA
- DESC:fix CVE-2021-44717
- fix CVE-2021-44717
2022-05-11 10:39:20 +08:00
* Fri May 6 2022 hanchao <hanchao47@huawei.com> - 1.17.3-2
- Type:CVE
- CVE:CVE-2022-28327,CVE-2022-24675
- SUG:NA
- DESC:fix CVE-2022-28327,CVE-2022-24675
- fix CVE-2022-28327 CVE-2022-24675
2021-11-21 03:33:14 +08:00
* Mon Nov 29 2021 chenjiankun <chenjiankun1@huawei.com> - 1.17.3-1
- upgrade to 1.17.3