golang: update to version 1.10.8

Fixes CVEs

1.10.6
CVE-2018-16873
CVE-2018-16874
CVE-2018-16875

1.10.8
CVE-2019-6486

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

diff --git a/lang/golang/golang-version.mk b/lang/golang/golang-version.mk
index 27184b7d9a319c2daca23c122ce1551266553026..b31f82fdfbe77f783d297598d8cc69043a4878b0 100644 (file)
--- a/lang/golang/golang-version.mk
+++ b/lang/golang/golang-version.mk
@@ -11,4 +11,4 @@ endif
 
 
 GO_VERSION_MAJOR_MINOR:=1.10
-GO_VERSION_PATCH:=3
+GO_VERSION_PATCH:=8

diff --git a/lang/golang/golang/Makefile b/lang/golang/golang/Makefile
index 898b1db9a23bcb2b9d5e1bd05c1d28d99c6b3498..cbc16de7bd0274b72664ef89a49efc5a350f80d2 100644 (file)
--- a/lang/golang/golang/Makefile
+++ b/lang/golang/golang/Makefile
@@ -10,7 +10,7 @@ include ../golang-version.mk
 
 PKG_NAME:=golang
 PKG_VERSION:=$(GO_VERSION_MAJOR_MINOR)$(if $(GO_VERSION_PATCH),.$(GO_VERSION_PATCH))
-PKG_RELEASE:=2
+PKG_RELEASE:=1
 
 GO_SOURCE_URLS:=https://dl.google.com/go/ \
                 https://mirrors.ustc.edu.cn/golang/ \
@@ -18,7 +18,7 @@ GO_SOURCE_URLS:=https://dl.google.com/go/ \
 
 PKG_SOURCE:=go$(PKG_VERSION).src.tar.gz
 PKG_SOURCE_URL:=$(GO_SOURCE_URLS)
-PKG_HASH:=567b1cc66c9704d1c019c50bef946272e911ec6baf244310f87f4e678be155f2
+PKG_HASH:=6faf74046b5e24c2c0b46e78571cca4d65e1b89819da1089e53ea57539c63491
 
 PKG_LICENSE:=BSD-3-Clause
 PKG_LICENSE_FILES:=LICENSE