From 84276c0449b3c902ec73247bf74a1104e4c4b1fa Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Tue, 19 Aug 2025 22:44:42 +0200 Subject: [PATCH] package/go: security bump to version 1.23.12 go1.23.11 (released 2025-07-08) includes security fixes to the go command, as well as bug fixes to the compiler, the linker, and the runtime. See: - https://go.dev/doc/devel/release#go1.23.11 - https://github.com/golang/go/issues?q=milestone%3AGo1.23.11+label%3ACherryPickApproved The 1.23.11 version fixes: - https://www.cve.org/CVERecord?id=CVE-2025-4674 go1.23.12 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime. See: - https://go.dev/doc/devel/release#go1.23.12 - https://github.com/golang/go/issues?q=milestone%3AGo1.23.12+label%3ACherryPickApproved The 1.23.12 version fixes: - https://www.cve.org/CVERecord?id=CVE-2025-47907 Signed-off-by: Peter Korsgaard [Julien: add links to release notes, fixed issues and CVEs] Signed-off-by: Julien Olivain --- package/go/go.hash | 14 +++++++------- package/go/go.mk | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package/go/go.hash b/package/go/go.hash index 62e0772e2e..dc88e9beab 100644 --- a/package/go/go.hash +++ b/package/go/go.hash @@ -1,9 +1,9 @@ # sha256 checksum from https://go.dev/dl/ -sha256 800a7ae1bff179a227b653a2f644517c800443b8b4abf3273af5e1cb7113de59 go1.23.10.src.tar.gz -sha256 ded3c0a8d6d2a0ea5e7599c49678efa05cda139d31baaaf7d8d536a9e4cc19b2 go1.23.10.linux-386.tar.gz -sha256 535f9f81802499f2a7dbfa70abb8fda3793725fcc29460f719815f6e10b5fd60 go1.23.10.linux-amd64.tar.gz -sha256 bfb1f1df7173f44648ee070a39ab0481068632f595305a699d89cd56a33b8081 go1.23.10.linux-arm64.tar.gz -sha256 b6e00c9a72406d394b9f167e74670e28b72ed559cca8115b21be1cb9d5316cb4 go1.23.10.linux-armv6l.tar.gz -sha256 8fb94455cfa5e9a5e8af2bfbc7323a6fed2dabaffda1a69dae5dd41b669bbb57 go1.23.10.linux-ppc64le.tar.gz -sha256 7d0e8651eb54fce5cfe2d4b412ddfa50144ce21907f72192a6549ffe03db4e1f go1.23.10.linux-s390x.tar.gz +sha256 e1cce9379a24e895714a412c7ddd157d2614d9edbe83a84449b6e1840b4f1226 go1.23.12.src.tar.gz +sha256 3b2fd446e26642555d1446a38ccbefb2a30bba3179d3ef132ed64d3c63b0c42a go1.23.12.linux-386.tar.gz +sha256 d3847fef834e9db11bf64e3fb34db9c04db14e068eeb064f49af747010454f90 go1.23.12.linux-amd64.tar.gz +sha256 52ce172f96e21da53b1ae9079808560d49b02ac86cecfa457217597f9bc28ab3 go1.23.12.linux-arm64.tar.gz +sha256 9704eba01401a3793f54fac162164b9c5d8cc6f3cab5cee72684bb72294d9f41 go1.23.12.linux-armv6l.tar.gz +sha256 1a7cc5f7baeaf39125dce5d660a39438e7f0e04d13d3498590d240aae976b565 go1.23.12.linux-ppc64le.tar.gz +sha256 2f43708aa0922d692da0a1fc775475c343907610bec77002de1bbe37601ea338 go1.23.12.linux-s390x.tar.gz sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE diff --git a/package/go/go.mk b/package/go/go.mk index 744bb0d3ba..69ca746783 100644 --- a/package/go/go.mk +++ b/package/go/go.mk @@ -4,7 +4,7 @@ # ################################################################################ -GO_VERSION = 1.23.10 +GO_VERSION = 1.23.12 HOST_GO_GOPATH = $(HOST_DIR)/share/go-path HOST_GO_HOST_CACHE = $(HOST_DIR)/share/host-go-cache