golang: Update to 1.17.5, add patch
authorJeffery To <jeffery.to@gmail.com>
Tue, 28 Dec 2021 07:00:09 +0000 (15:00 +0800)
committerJeffery To <jeffery.to@gmail.com>
Tue, 28 Dec 2021 07:17:20 +0000 (15:17 +0800)
commit2f52958e02fb96e88999eaa8ab597c763d56c000
tree980ee240c83663d5fa00cf9ab716eaf0b512f454
parentf7973fc7afc6c05cbb535439249ce5587fad4f80
golang: Update to 1.17.5, add patch

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eac2e91a285e9df119ce1aac0f4fe340cc54a6e4)
lang/golang/golang/Makefile
lang/golang/golang/patches/001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch [new file with mode: 0644]