From bd2c679b7d7891e303292be1c4230309e905ee25 Mon Sep 17 00:00:00 2001 From: jackeyji Date: Mon, 14 Apr 2025 15:39:01 +0800 Subject: [PATCH] upgrade to 1.24.2 to fix CVE-2024-45341 CVE-2024-45336 and CVE-2025-22865 Signed-off-by: jackeyji --- apply-patches | 2 +- golang.spec | 6 +++++- ...ch64-1.24.0.conf => loongarch64-1.24.2.conf | 18 ++++++++++++++++++ sources | 4 ++-- 4 files changed, 26 insertions(+), 4 deletions(-) rename loongarch64-1.24.0.conf => loongarch64-1.24.2.conf (70%) diff --git a/apply-patches b/apply-patches index 7c67349..aead6cc 100644 --- a/apply-patches +++ b/apply-patches @@ -2,7 +2,7 @@ set -ex -goversion="1.24.0" +goversion="1.24.2" if [ ! -d loongarch64 ]; then tar -xf loongarch64-${goversion}.tar.gz diff --git a/golang.spec b/golang.spec index b939ab3..5901c48 100644 --- a/golang.spec +++ b/golang.spec @@ -75,7 +75,7 @@ Name: golang -Version: 1.24.0 +Version: 1.24.2 Release: %{baserelease}%{?dist} Summary: An open source programming language supported by Google License: BSD and Public Domain @@ -364,6 +364,10 @@ fi %changelog +* Mon Apr 14 2025 jackeyji - 1.24.2-1 +- [Type] security +- [DESC] upgrade to 1.24.2 to fix CVE-2024-45341 CVE-2024-45336 and CVE-2025-22865 + * Mon Feb 17 2025 zhaoxiaolin - 1.24.0-1 - [Type] other - [DESC] upgrade to 1.24.0 for golang 1.22 is EOS, and add new feature support, optimize code, add instructions, etc. on loongarch64 diff --git a/loongarch64-1.24.0.conf b/loongarch64-1.24.2.conf similarity index 70% rename from loongarch64-1.24.0.conf rename to loongarch64-1.24.2.conf index 62798bb..a0c951f 100644 --- a/loongarch64-1.24.0.conf +++ b/loongarch64-1.24.2.conf @@ -42,3 +42,21 @@ 0042-math-implement-func-archExp-and-archExp2-in-assembly.patch 0043-math-implement-func-archLog-in-assembly-on-loong64.patch 0044-cmd-go-internal-work-allow-a-bunch-of-loong64-specif.patch +0045-runtime-cgo-use-standard-ABI-call-setg_gcc-in-crossc.patch +0046-cmd-internal-obj-add-new-32-bits-immediate-classes-o.patch +0047-crypto-internal-fips140-edwards25519-implement-func-.patch +0048-cmd-intarnal-obj-loong64-Add-optab-entry-to-omit-the.patch +0049-cmd-intarnal-obj-loong64-Add-optab-entry-to-omit-the.patch +0050-cmd-internal-obj-loong64-add-V-XV-ADD-SUB-.-B-H-W-D-.patch +0051-internal-bytealg-optimize-Count-String-in-loong64.patch +0052-cmd-link-remove-trampoline-for-plt-symbol.patch +0053-runtime-runtime-cgo-use-libc-for-sigaction-syscalls-.patch +0054-runtime-add-function-runtime.cgoSigtramp-support-on-.patch +0055-internal-cpu-use-correct-variable-when-parsing-CPU-f.patch +0056-cmd-internal-obj-loong64-add-X-VMULW-EV-OD-.-H.B-W.H.patch +0057-cmd-internal-obj-loong64-add-X-VSHUF4I.-B-H-W-D-inst.patch +0058-runtime-log-profile-when-mutex-profile-test-fails.patch +0059-runtime-optimizing-memclrNoHeapPointers-implementati.patch +0060-runtime-delete-redundant-branch-jumps-in-memclrNoHea.patch +0061-cmd-compile-set-unalignedOK-to-make-memcombine-work-.patch +0062-runtime-optimize-the-function-memmove-using-SIMD-on-.patch diff --git a/sources b/sources index 50a691d..c457f90 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (go1.24.0.src.tar.gz) = 36ba9a3a541208fd33aa49b969d892578e209570541d2b6ca6ff784250d8b6777597d347b823c6026acf0c2741b4abc9012693004e623a1434b06cfecdbebaa8 -SHA512 (loongarch64-1.24.0.tar.gz) = cee2f9aff9fc191f39e281e0dfbff7fa0877debe70256ba96e7f675d27a7afefde6bd260dcfcb5ae5b85dc321408af22ff440ef712b5836f340eca1172d2ca27 +SHA512 (go1.24.2.src.tar.gz) = 6366a32f6678e7908b138f62dafeed96f7144b3b93505e75fba374b33727da8b1d087c1f979f493382b319758ebfcbeb30e9d7dadcb2923b628c8abe7db41c6f +SHA512 (loongarch64-1.24.2.tar.gz) = d10c00174ed2e87dd806dabe3777e695f023281ec6d2e1aa16bb3a315ad8730e7581a62bdc92f7c1e6dd04350ed63d8b32a8d75fbe078bfe944c0b0f7cad433a -- Gitee