CVE num upstream commit openEuler patch CVE-2023-29400 9db0e74f606b8afb28cc71d4b1c8b4ed24cabbf5 0016-release-branch.go1.19-html-template-emit-filterFails.patch CVE-2023-24540 ce7bd33345416e6d8cac901792060591cafc2797 0015-release-branch.go1.19-html-template-handle-all-JS-wh.patch CVE-2023-24539 e49282327b05192e46086bf25fd3ac691205fe80 0014-release-branch.go1.19-html-template-disallow-angle-b.patch CVE-2023-24538 b1e3ecfa06b67014429a197ec5e134ce4303ad9b 0013-release-branch.go1.19-html-template-disallow-actions.patch CVE-2023-24537 126a1d02da82f93ede7ce0bd8d3c51ef627f2104 0012-release-branch.go1.19-go-scanner-reject-large-line-a.patch CVE-2023-24536 7917b5f31204528ea72e0629f0b7d52b35b27538 0011-release-branch.go1.19-mime-multipart-limit-parsed-mi.patch CVE-2023-24536 7a359a651c7ebdb29e0a1c03102fce793e9f58f0 0010-release-branch.go1.19-net-textproto-mime-multipart-i.patch CVE-2023-24536 ef41a4e2face45e580c5836eaebd51629fc23f15 0009-release-branch.go1.19-mime-multipart-avoid-excessive.patch CVE-2023-24534 d6759e7a059f4208f07aa781402841d7ddaaef96 0008-release-branch.go1.19-net-textproto-avoid-overpredic.patch CVE-2023-24532 639b67ed114151c0d786aa26e7faeab942400703 0007-release-branch.go1.19-crypto-internal-nistec-reduce-.patch CVE-2022-41723 5c3e11bd0b5c0a86e5beffcd4339b86a902b21c3 0006-release-branch.go1.19-net-http-update-bundled-golang.patch CVE-2022-41724 00b256e9e3c0fa02a278ec9dfc3e191e02ceaf80 0005-release-branch.go1.19-crypto-tls-replace-all-usages-.patch CVE-2022-41725 5c55ac9bf1e5f779220294c843526536605f42ab 0004-release-branch.go1.19-mime-multipart-limit-memory-in.patch CVE-2022-41722 3345ddca41f00f9ed6fc3c1a36f6e2bede02d7ff 0003-release-branch.go1.19-path-filepath-do-not-Clean-a-..patch Signed-off-by: zhangzhihui <zhangzhihui@xfusion.com>
433 lines
14 KiB
RPMSpec
433 lines
14 KiB
RPMSpec
%global debug_package %{nil}
|
|
%global _binaries_in_noarch_packages_terminate_build 0
|
|
%global golibdir %{_libdir}/golang
|
|
%global goroot /usr/lib/%{name}
|
|
%global go_api 1.19
|
|
%global go_version 1.19
|
|
%global __spec_install_post /usr/lib/rpm/check-rpaths /usr/lib/rpm/check-buildroot /usr/lib/rpm/brp-compress
|
|
%global __requires_exclude_from ^(%{_datadir}|/usr/lib)/%{name}/(doc|src)/.*$
|
|
%global __strip /bin/true
|
|
%global vendor %{?_vendor:%{_vendor}}%{!?_vendor:openEuler}
|
|
%define _use_internal_dependency_generator 0
|
|
%define __find_requires %{nil}
|
|
|
|
%bcond_with bootstrap
|
|
%ifarch x86_64 aarch64 riscv64
|
|
%bcond_without ignore_tests
|
|
%else
|
|
%bcond_with ignore_tests
|
|
%endif
|
|
|
|
%ifarch x86_64 aarch64 riscv64
|
|
%global external_linker 1
|
|
%else
|
|
%global external_linker 0
|
|
%endif
|
|
|
|
%ifarch x86_64 aarch64 riscv64
|
|
%global cgo_enabled 1
|
|
%else
|
|
%global cgo_enabled 0
|
|
%endif
|
|
|
|
%if %{with bootstrap}
|
|
%global golang_bootstrap 0
|
|
%else
|
|
%global golang_bootstrap 1
|
|
%endif
|
|
|
|
%if %{with ignore_tests}
|
|
%global fail_on_tests 0
|
|
%else
|
|
%global fail_on_tests 1
|
|
%endif
|
|
|
|
%global shared 0
|
|
|
|
%ifarch x86_64
|
|
%global race 1
|
|
%else
|
|
%global race 0
|
|
%endif
|
|
|
|
%ifarch x86_64
|
|
%global gohostarch amd64
|
|
%endif
|
|
%ifarch aarch64
|
|
%global gohostarch arm64
|
|
%endif
|
|
%ifarch riscv64
|
|
%global gohostarch riscv64
|
|
%endif
|
|
|
|
Name: golang
|
|
Version: 1.19.4
|
|
Release: 6
|
|
Summary: The Go Programming Language
|
|
License: BSD and Public Domain
|
|
URL: https://golang.org/
|
|
Source0: https://dl.google.com/go/go1.19.4.src.tar.gz
|
|
Patch0: 0001-Enable-go-plugin-support-for-riscv64.patch
|
|
Patch1: 0002-runtime-support-riscv64-SV57-mode.patch
|
|
Patch2: 0003-release-branch.go1.19-path-filepath-do-not-Clean-a-..patch
|
|
Patch3: 0004-release-branch.go1.19-mime-multipart-limit-memory-in.patch
|
|
Patch4: 0005-release-branch.go1.19-crypto-tls-replace-all-usages-.patch
|
|
Patch5: 0006-release-branch.go1.19-net-http-update-bundled-golang.patch
|
|
Patch6: 0007-release-branch.go1.19-crypto-internal-nistec-reduce-.patch
|
|
Patch7: 0008-release-branch.go1.19-net-textproto-avoid-overpredic.patch
|
|
Patch8: 0009-release-branch.go1.19-mime-multipart-avoid-excessive.patch
|
|
Patch9: 0010-release-branch.go1.19-net-textproto-mime-multipart-i.patch
|
|
Patch10: 0011-release-branch.go1.19-mime-multipart-limit-parsed-mi.patch
|
|
Patch11: 0012-release-branch.go1.19-go-scanner-reject-large-line-a.patch
|
|
Patch12: 0013-release-branch.go1.19-html-template-disallow-actions.patch
|
|
Patch13: 0014-release-branch.go1.19-html-template-disallow-angle-b.patch
|
|
Patch14: 0015-release-branch.go1.19-html-template-handle-all-JS-wh.patch
|
|
Patch15: 0016-release-branch.go1.19-html-template-emit-filterFails.patch
|
|
|
|
%if !%{golang_bootstrap}
|
|
BuildRequires: gcc-go >= 5
|
|
%else
|
|
BuildRequires: golang > 1.4
|
|
%endif
|
|
BuildRequires: hostname
|
|
# for tests
|
|
BuildRequires: pcre-devel, glibc-static, perl-interpreter, procps-ng
|
|
|
|
Provides: go = %{version}-%{release}
|
|
Requires: %{name}-devel = %{version}-%{release}
|
|
|
|
Obsoletes: %{name}-pkg-bin-linux-386 < 1.4.99
|
|
Obsoletes: %{name}-pkg-bin-linux-amd64 < 1.4.99
|
|
Obsoletes: %{name}-pkg-bin-linux-arm < 1.4.99
|
|
Obsoletes: %{name}-pkg-linux-386 < 1.4.99
|
|
Obsoletes: %{name}-pkg-linux-amd64 < 1.4.99
|
|
Obsoletes: %{name}-pkg-linux-arm < 1.4.99
|
|
Obsoletes: %{name}-vet < 0-12.1
|
|
Obsoletes: %{name}-cover < 0-12.1
|
|
|
|
Requires(post): %{_sbindir}/update-alternatives
|
|
Requires(postun): %{_sbindir}/update-alternatives
|
|
Recommends: glibc gcc git subversion
|
|
|
|
# generated by:
|
|
# go list -f {{.ImportPath}} ./src/vendor/... | sed "s:_$PWD/src/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):" && go list -f {{.ImportPath}} ./src/cmd/vendor/... | sed "s:_$PWD/src/cmd/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):"
|
|
Provides: bundled(golang(golang.org/x/crypto/chacha20poly1305))
|
|
Provides: bundled(golang(golang.org/x/crypto/cryptobyte))
|
|
Provides: bundled(golang(golang.org/x/crypto/cryptobyte/asn1))
|
|
Provides: bundled(golang(golang.org/x/crypto/curve25519))
|
|
Provides: bundled(golang(golang.org/x/crypto/internal/chacha20))
|
|
Provides: bundled(golang(golang.org/x/crypto/poly1305))
|
|
Provides: bundled(golang(golang.org/x/net/dns/dnsmessage))
|
|
Provides: bundled(golang(golang.org/x/net/http/httpguts))
|
|
Provides: bundled(golang(golang.org/x/net/http/httpproxy))
|
|
Provides: bundled(golang(golang.org/x/net/http2/hpack))
|
|
Provides: bundled(golang(golang.org/x/net/idna))
|
|
Provides: bundled(golang(golang.org/x/net/internal/nettest))
|
|
Provides: bundled(golang(golang.org/x/net/nettest))
|
|
Provides: bundled(golang(golang.org/x/text/secure))
|
|
Provides: bundled(golang(golang.org/x/text/secure/bidirule))
|
|
Provides: bundled(golang(golang.org/x/text/transform))
|
|
Provides: bundled(golang(golang.org/x/text/unicode))
|
|
Provides: bundled(golang(golang.org/x/text/unicode/bidi))
|
|
Provides: bundled(golang(golang.org/x/text/unicode/norm))
|
|
Provides: bundled(golang(github.com/google/pprof/driver))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/binutils))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/driver))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/elfexec))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/graph))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/measurement))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/plugin))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/proftest))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/report))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/symbolizer))
|
|
Provides: bundled(golang(github.com/google/pprof/internal/symbolz))
|
|
Provides: bundled(golang(github.com/google/pprof/profile))
|
|
Provides: bundled(golang(github.com/google/pprof/third.party/d3))
|
|
Provides: bundled(golang(github.com/google/pprof/third.party/d3flamegraph))
|
|
Provides: bundled(golang(github.com/google/pprof/third.party/svgpan))
|
|
Provides: bundled(golang(github.com/ianlancetaylor/demangle))
|
|
Provides: bundled(golang(golang.org/x/arch/arm/armasm))
|
|
Provides: bundled(golang(golang.org/x/arch/arm64/arm64asm))
|
|
Provides: bundled(golang(golang.org/x/arch/ppc64/ppc64asm))
|
|
Provides: bundled(golang(golang.org/x/arch/x86/x86asm))
|
|
Provides: bundled(golang(golang.org/x/crypto/ssh/terminal))
|
|
Provides: bundled(golang(golang.org/x/sys/unix))
|
|
Provides: bundled(golang(golang.org/x/sys/windows))
|
|
Provides: bundled(golang(golang.org/x/sys/windows/registry))
|
|
|
|
Provides: %{name}-bin = %{version}-%{release}
|
|
Obsoletes: %{name}-bin
|
|
Obsoletes: %{name}-shared
|
|
Obsoletes: %{name}-docs
|
|
Obsoletes: %{name}-data < 1.1.1-4
|
|
Obsoletes: %{name}-vim < 1.4
|
|
Obsoletes: emacs-%{name} < 1.4
|
|
Requires: %{vendor}-rpm-config
|
|
|
|
#Patch6001: 0001-release-branch.go1.17-crypto-elliptic-tolerate-zero-.patch
|
|
|
|
ExclusiveArch: %{golang_arches}
|
|
|
|
%description
|
|
%{summary}.
|
|
|
|
%package help
|
|
Summary: Golang compiler helps and manual docs
|
|
Requires: %{name} = %{version}-%{release}
|
|
BuildArch: noarch
|
|
Provides: %{name}-docs = %{version}-%{release}
|
|
Obsoletes: %{name}-docs
|
|
Provides: %{name}-shared = %{version}-%{release}
|
|
Obsoletes: %{name}-shared
|
|
|
|
%description help
|
|
%{summary}.
|
|
|
|
%package devel
|
|
Summary: Golang compiler devel
|
|
BuildArch: noarch
|
|
Requires: %{name} = %{version}-%{release}
|
|
Provides: %{name}-src = %{version}-%{release}
|
|
Obsoletes: %{name}-src
|
|
Provides: %{name}-tests = %{version}-%{release}
|
|
Obsoletes: %{name}-tests
|
|
Provides: %{name}-misc = %{version}-%{release}
|
|
Obsoletes: %{name}-misc
|
|
Obsoletes: %{name}-race = %{version}-%{release}
|
|
|
|
%description devel
|
|
%{summary}.
|
|
|
|
# Workaround old RPM bug of symlink-replaced-with-dir failure
|
|
%pretrans -p <lua>
|
|
for _,d in pairs({"api", "doc", "include", "lib", "src"}) do
|
|
path = "%{goroot}/" .. d
|
|
if posix.stat(path, "type") == "link" then
|
|
os.remove(path)
|
|
posix.mkdir(path)
|
|
end
|
|
end
|
|
|
|
%prep
|
|
%autosetup -n go -p1
|
|
|
|
%build
|
|
uname -a
|
|
cat /proc/cpuinfo
|
|
cat /proc/meminfo
|
|
|
|
%if !%{golang_bootstrap}
|
|
export GOROOT_BOOTSTRAP=/
|
|
%else
|
|
export GOROOT_BOOTSTRAP=%{goroot}
|
|
%endif
|
|
|
|
export GOROOT_FINAL=%{goroot}
|
|
export GOHOSTOS=linux
|
|
export GOHOSTARCH=%{gohostarch}
|
|
|
|
pushd src
|
|
export CFLAGS="$RPM_OPT_FLAGS"
|
|
export LDFLAGS="$RPM_LD_FLAGS"
|
|
export CC="gcc"
|
|
export CC_FOR_TARGET="gcc"
|
|
export GOOS=linux
|
|
export GOARCH=%{gohostarch}
|
|
%if !%{external_linker}
|
|
export GO_LDFLAGS="-linkmode internal"
|
|
%endif
|
|
%if !%{cgo_enabled}
|
|
export CGO_ENABLED=0
|
|
%endif
|
|
|
|
%ifarch aarch64
|
|
export GO_LDFLAGS="-s -w"
|
|
%endif
|
|
|
|
./make.bash --no-clean -v
|
|
popd
|
|
|
|
%if %{shared}
|
|
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -buildmode=shared -v -x std
|
|
%endif
|
|
|
|
%if %{race}
|
|
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -race -v -x std
|
|
%endif
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
rm -rf pkg/obj/go-build/*
|
|
|
|
mkdir -p %{buildroot}%{_bindir}
|
|
mkdir -p %{buildroot}%{goroot}
|
|
|
|
cp -apv api bin doc lib pkg src misc test VERSION \
|
|
%{buildroot}%{goroot}
|
|
|
|
# bz1099206
|
|
find %{buildroot}%{goroot}/src -exec touch -r %{buildroot}%{goroot}/VERSION "{}" \;
|
|
# and level out all the built archives
|
|
touch %{buildroot}%{goroot}/pkg
|
|
find %{buildroot}%{goroot}/pkg -exec touch -r %{buildroot}%{goroot}/pkg "{}" \;
|
|
# generate the spec file ownership of this source tree and packages
|
|
cwd=$(pwd)
|
|
src_list=$cwd/go-src.list
|
|
pkg_list=$cwd/go-pkg.list
|
|
shared_list=$cwd/go-shared.list
|
|
race_list=$cwd/go-race.list
|
|
misc_list=$cwd/go-misc.list
|
|
docs_list=$cwd/go-docs.list
|
|
tests_list=$cwd/go-tests.list
|
|
rm -f $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
|
|
touch $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
|
|
pushd %{buildroot}%{goroot}
|
|
find src/ -type d -a \( ! -name testdata -a ! -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $src_list
|
|
find src/ ! -type d -a \( ! -ipath '*/testdata/*' -a ! -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $src_list
|
|
|
|
find bin/ pkg/ -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%%%dir %{goroot}/%p\n' >> $pkg_list
|
|
find bin/ pkg/ ! -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%{goroot}/%p\n' >> $pkg_list
|
|
|
|
find doc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $docs_list
|
|
find doc/ ! -type d -printf '%{goroot}/%p\n' >> $docs_list
|
|
|
|
find misc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $misc_list
|
|
find misc/ ! -type d -printf '%{goroot}/%p\n' >> $misc_list
|
|
|
|
%if %{shared}
|
|
mkdir -p %{buildroot}/%{_libdir}/
|
|
mkdir -p %{buildroot}/%{golibdir}/
|
|
for file in $(find . -iname "*.so" ); do
|
|
chmod 755 $file
|
|
mv $file %{buildroot}/%{golibdir}
|
|
pushd $(dirname $file)
|
|
ln -fs %{golibdir}/$(basename $file) $(basename $file)
|
|
popd
|
|
echo "%%{goroot}/$file" >> $shared_list
|
|
echo "%%{golibdir}/$(basename $file)" >> $shared_list
|
|
done
|
|
|
|
find pkg/*_dynlink/ -type d -printf '%%%dir %{goroot}/%p\n' >> $shared_list
|
|
find pkg/*_dynlink/ ! -type d -printf '%{goroot}/%p\n' >> $shared_list
|
|
%endif
|
|
|
|
%if %{race}
|
|
|
|
find pkg/*_race/ -type d -printf '%%%dir %{goroot}/%p\n' >> $race_list
|
|
find pkg/*_race/ ! -type d -printf '%{goroot}/%p\n' >> $race_list
|
|
|
|
%endif
|
|
|
|
find test/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
|
|
find test/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
|
|
find src/ -type d -a \( -name testdata -o -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $tests_list
|
|
find src/ ! -type d -a \( -ipath '*/testdata/*' -o -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $tests_list
|
|
# this is only the zoneinfo.zip
|
|
find lib/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
|
|
find lib/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
|
|
popd
|
|
|
|
rm -rfv %{buildroot}%{goroot}/doc/Makefile
|
|
|
|
mkdir -p %{buildroot}%{goroot}/bin/linux_%{gohostarch}
|
|
ln -sf %{goroot}/bin/go %{buildroot}%{goroot}/bin/linux_%{gohostarch}/go
|
|
ln -sf %{goroot}/bin/gofmt %{buildroot}%{goroot}/bin/linux_%{gohostarch}/gofmt
|
|
|
|
mkdir -p %{buildroot}%{gopath}/src/github.com
|
|
mkdir -p %{buildroot}%{gopath}/src/bitbucket.org
|
|
mkdir -p %{buildroot}%{gopath}/src/code.google.com/p
|
|
mkdir -p %{buildroot}%{gopath}/src/golang.org/x
|
|
|
|
%check
|
|
export GOROOT=$(pwd -P)
|
|
export PATH="$GOROOT"/bin:"$PATH"
|
|
cd src
|
|
|
|
export CC="gcc"
|
|
export CFLAGS="$RPM_OPT_FLAGS"
|
|
export LDFLAGS="$RPM_LD_FLAGS"
|
|
%if !%{external_linker}
|
|
export GO_LDFLAGS="-linkmode internal"
|
|
%endif
|
|
%if !%{cgo_enabled} || !%{external_linker}
|
|
export CGO_ENABLED=0
|
|
%endif
|
|
|
|
export GO_TEST_TIMEOUT_SCALE=2
|
|
|
|
%if %{fail_on_tests}
|
|
echo tests ignored
|
|
%else
|
|
./run.bash --no-rebuild -v -v -v -k go_test:testing || :
|
|
%endif
|
|
cd ..
|
|
|
|
%post
|
|
%{_sbindir}/update-alternatives --install %{_bindir}/go \
|
|
go %{goroot}/bin/go 90 \
|
|
--slave %{_bindir}/gofmt gofmt %{goroot}/bin/gofmt
|
|
|
|
%preun
|
|
if [ $1 = 0 ]; then
|
|
%{_sbindir}/update-alternatives --remove go %{goroot}/bin/go
|
|
fi
|
|
|
|
%if %{shared}
|
|
%files -f go-pkg.list -f go-shared.list
|
|
%else
|
|
%files -f go-pkg.list
|
|
%endif
|
|
|
|
%doc LICENSE PATENTS
|
|
%doc %{goroot}/VERSION
|
|
%dir %{goroot}/doc
|
|
%doc %{goroot}/doc/*
|
|
%dir %{goroot}
|
|
%exclude %{goroot}/src/
|
|
%exclude %{goroot}/doc/
|
|
%exclude %{goroot}/misc/
|
|
%exclude %{goroot}/test/
|
|
%exclude %{goroot}/lib/
|
|
%{goroot}/*
|
|
%dir %{gopath}
|
|
%dir %{gopath}/src
|
|
%dir %{gopath}/src/github.com/
|
|
%dir %{gopath}/src/bitbucket.org/
|
|
%dir %{gopath}/src/code.google.com/
|
|
%dir %{gopath}/src/code.google.com/p/
|
|
%dir %{gopath}/src/golang.org
|
|
%dir %{gopath}/src/golang.org/x
|
|
|
|
%files help -f go-docs.list
|
|
|
|
%files devel -f go-tests.list -f go-misc.list -f go-src.list
|
|
|
|
%changelog
|
|
* Wed May 10 2023 zhangzhihui<zhangzhihui@xfusion.com> - 1.19.4-6
|
|
- fix CVE-2024-29400
|
|
- fix CVE-2023-24540
|
|
- fix CVE-2023-24539
|
|
- fix CVE-2023-24536
|
|
- fix CVE-2023-24532
|
|
- fix CVE-2022-41723
|
|
- fix CVE-2022-41724
|
|
- fix CVE-2022-41725
|
|
- fix CVE-2022-41722
|
|
|
|
|
|
* Sat May 6 2023 sunchendong<sunchendong@xfusion.com> - 1.19.4-5
|
|
- fix CVE-2023-24534
|
|
|
|
* Fri Apr 21 2023 sunchendong<sunchendong@xfusion.com> - 1.19.4-4
|
|
- fix CVE-2023-24538
|
|
|
|
* Thu Apr 20 2023 sunchendong<sunchendong@xfusion.com> - 1.19.4-3
|
|
- fix CVE-2023-24537
|
|
|
|
* Mon Apr 03 2023 misaka00251 <liuxin@iscas.ac.cn> - 1.19.4-2
|
|
- Enable go plugin support for riscv64 (based on work by yangjinghua)
|
|
- Backport upstream sv57 enablement for riscv64
|
|
|
|
* Tue Jan 10 2023 hanchao <hanchao47@huawei.com> - 1.19.4-1
|
|
- upgrade to 1.19.4
|