golang: Update to 1.17.5, add patch
authorJeffery To <jeffery.to@gmail.com>
Tue, 28 Dec 2021 07:00:09 +0000 (15:00 +0800)
committerJeffery To <jeffery.to@gmail.com>
Tue, 28 Dec 2021 07:15:13 +0000 (15:15 +0800)
commiteac2e91a285e9df119ce1aac0f4fe340cc54a6e4
tree6c231f71edb85a54aa5db2be8cf6c581c8559d39
parent45438d033ec215c5c80b79d78d4a14e53a408cb9
golang: Update to 1.17.5, add patch

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
lang/golang/golang/Makefile
lang/golang/golang/patches/001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch [new file with mode: 0644]