From 568d30bb10246e3f4483f259561367c322fac707 Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Sat, 31 Mar 2018 16:53:10 +0200 Subject: [PATCH 1/2] go_1_10: 1.10 -> 1.10.1 This updates go to the latest version of the golang 1.10 branch. A few minor (but important) things are fixed in this version: * CVE-2018-7187 - arbitrary code execution in `go get` (when used with --insecure) [1] * Extended Key Usage verification in client certificate scenarios [3] * a bunch of stability changes The full list of changes can se been on GitHub [2] & [4]. [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7187 [2] https://github.com/golang/go/issues?q=milestone%3AGo1.10.1 [3] https://github.com/golang/go/issues/23884 [4] https://github.com/golang/go/issues/24563 --- pkgs/development/compilers/go/1.10.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/compilers/go/1.10.nix b/pkgs/development/compilers/go/1.10.nix index 145f6a17978d7..173d7a32fdc6f 100644 --- a/pkgs/development/compilers/go/1.10.nix +++ b/pkgs/development/compilers/go/1.10.nix @@ -25,13 +25,13 @@ in stdenv.mkDerivation rec { name = "go-${version}"; - version = "1.10"; + version = "1.10.1"; src = fetchFromGitHub { owner = "golang"; repo = "go"; rev = "go${version}"; - sha256 = "1dzs1mz3zxgg1qyi2lrlxdz1lsvazxvmj9cb69pgqnwjlh3jpw0l"; + sha256 = "1wqwy52ibb343a4v7b9q26xa6r5jk4khfxd90wbpcayws8cxly8m"; }; # perl is used for testing go vet From e9f74b91d6f0d6997ee25cae6d100e6ba4b3a6eb Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Sun, 1 Apr 2018 12:44:08 +0200 Subject: [PATCH 2/2] go_1_9: 1.9.4 -> 1.9.5 This is a maintenance bump of the golang 1.9 version. Within the updates are a few bug fixes including an (extended?) fix for CVE-2018-7187 [1]. The complete changelog is available at the golang GitHub project [2]. [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7187 [2] https://github.com/golang/go/issues?q=milestone%3AGo1.9.5 --- pkgs/development/compilers/go/1.9.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/compilers/go/1.9.nix b/pkgs/development/compilers/go/1.9.nix index c866212170c47..631e61c23053e 100644 --- a/pkgs/development/compilers/go/1.9.nix +++ b/pkgs/development/compilers/go/1.9.nix @@ -25,13 +25,13 @@ in stdenv.mkDerivation rec { name = "go-${version}"; - version = "1.9.4"; + version = "1.9.5"; src = fetchFromGitHub { owner = "golang"; repo = "go"; rev = "go${version}"; - sha256 = "15d9lfiy1cjfz6nqnig5884ykqckx58cynd1bva1xna7bwcwwp2r"; + sha256 = "15dx1b71xv7b265gqk9nv02pirggpw7d83apikhrza2qkj64ydd0"; }; # perl is used for testing go vet