From 5d02277884e406625c0142e7c3e68dfe30bdf6c4 Mon Sep 17 00:00:00 2001 From: Christian Stewart Date: Wed, 3 Jul 2024 12:33:29 -0700 Subject: [PATCH] package/go: security bump version to go1.22.5 Fixes CVE: CVE-2024-24791: net/http: denial of service due to improper 100-continue handling https://go.dev/doc/devel/release#go1.22.5 Signed-off-by: Christian Stewart Signed-off-by: Thomas Petazzoni --- package/go/go-src/go-src.hash | 2 +- package/go/go.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/go/go-src/go-src.hash b/package/go/go-src/go-src.hash index 7952461f2d..d300f6e2c9 100644 --- a/package/go/go-src/go-src.hash +++ b/package/go/go-src/go-src.hash @@ -1,3 +1,3 @@ # From https://go.dev/dl -sha256 fed720678e728a7ca30ba8d1ded1caafe27d16028fab0232b8ba8e22008fb784 go1.22.4.src.tar.gz +sha256 ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6 go1.22.5.src.tar.gz sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE diff --git a/package/go/go.mk b/package/go/go.mk index 91a8fb828f..bfbe997911 100644 --- a/package/go/go.mk +++ b/package/go/go.mk @@ -4,7 +4,7 @@ # ################################################################################ -GO_VERSION = 1.22.4 +GO_VERSION = 1.22.5 HOST_GO_GOPATH = $(HOST_DIR)/share/go-path HOST_GO_HOST_CACHE = $(HOST_DIR)/share/host-go-cache