diff mbox series

[meta-lts-mixins,kirkstone/go] go: upgrade 1.25.2 -> 1.25.3

Message ID 20251027214918.3984048-1-peter.marko@siemens.com
State Not Applicable
Delegated to: Steve Sakoman
Headers show
Series [meta-lts-mixins,kirkstone/go] go: upgrade 1.25.2 -> 1.25.3 | expand

Commit Message

Marko, Peter Oct. 27, 2025, 9:49 p.m. UTC
Upgrade to latest 1.25.x release [1]:

$ git --no-pager log --oneline go1.25.2..go1.25.3
28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3
e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187
79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date

This release addresses breakage caused by a security patch included in Go 1.25.2
and 1.24.8, which enforced overly restrictive validation on the parsing of X.509
certificates. We've removed those restrictions while maintaining the security
fix that the initial release addressed [2].

[1] https://github.com/golang/go/compare/go1.25.2...go1.25.3
[2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik

(From OE-Core rev: d5f281bf13995117d98af809a2caea91e241713e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---
 recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc}        | 2 +-
 ...o-binary-native_1.25.2.bb => go-binary-native_1.25.3.bb} | 6 +++---
 ...cross-canadian_1.25.2.bb => go-cross-canadian_1.25.3.bb} | 0
 .../go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb}           | 0
 .../go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb}     | 0
 .../go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb}       | 0
 recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb}          | 0
 7 files changed, 4 insertions(+), 4 deletions(-)
 rename recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc} (91%)
 rename recipes-devtools/go/{go-binary-native_1.25.2.bb => go-binary-native_1.25.3.bb} (79%)
 rename recipes-devtools/go/{go-cross-canadian_1.25.2.bb => go-cross-canadian_1.25.3.bb} (100%)
 rename recipes-devtools/go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb} (100%)
 rename recipes-devtools/go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb} (100%)
 rename recipes-devtools/go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb} (100%)
 rename recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb} (100%)

Comments

Marko, Peter Oct. 27, 2025, 9:50 p.m. UTC | #1
Please ignore, wrong mailing list.
Peter

> -----Original Message-----
> From: Marko, Peter (FT D EU SK BFS1) <Peter.Marko@siemens.com>
> Sent: Monday, October 27, 2025 22:49
> To: openembedded-core@lists.openembedded.org
> Cc: jose.quaresma@foundries.io; Marko, Peter (FT D EU SK BFS1)
> <Peter.Marko@siemens.com>
> Subject: [meta-lts-mixins][kirkstone/go][PATCH] go: upgrade 1.25.2 -> 1.25.3
> 
> Upgrade to latest 1.25.x release [1]:
> 
> $ git --no-pager log --oneline go1.25.2..go1.25.3
> 28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3
> e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187
> 79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date
> 
> This release addresses breakage caused by a security patch included in Go
> 1.25.2
> and 1.24.8, which enforced overly restrictive validation on the parsing of X.509
> certificates. We've removed those restrictions while maintaining the security
> fix that the initial release addressed [2].
> 
> [1] https://github.com/golang/go/compare/go1.25.2...go1.25.3
> [2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik
> 
> (From OE-Core rev: d5f281bf13995117d98af809a2caea91e241713e)
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
> Signed-off-by: Ross Burton <ross.burton@arm.com>
> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> ---
>  recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc}        | 2 +-
>  ...o-binary-native_1.25.2.bb => go-binary-native_1.25.3.bb} | 6 +++---
>  ...cross-canadian_1.25.2.bb => go-cross-canadian_1.25.3.bb} | 0
>  .../go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb}           | 0
>  .../go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb}     | 0
>  .../go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb}       | 0
>  recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb}          | 0
>  7 files changed, 4 insertions(+), 4 deletions(-)
>  rename recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc} (91%)
>  rename recipes-devtools/go/{go-binary-native_1.25.2.bb => go-binary-
> native_1.25.3.bb} (79%)
>  rename recipes-devtools/go/{go-cross-canadian_1.25.2.bb => go-cross-
> canadian_1.25.3.bb} (100%)
>  rename recipes-devtools/go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb} (100%)
>  rename recipes-devtools/go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb}
> (100%)
>  rename recipes-devtools/go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb}
> (100%)
>  rename recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb} (100%)
> 
> diff --git a/recipes-devtools/go/go-1.25.2.inc b/recipes-devtools/go/go-1.25.3.inc
> similarity index 91%
> rename from recipes-devtools/go/go-1.25.2.inc
> rename to recipes-devtools/go/go-1.25.3.inc
> index 9d1cf69..c29f4d6 100644
> --- a/recipes-devtools/go/go-1.25.2.inc
> +++ b/recipes-devtools/go/go-1.25.3.inc
> @@ -18,4 +18,4 @@ SRC_URI += "\
>      file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \
>      file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \
>  "
> -SRC_URI[main.sha256sum] =
> "3711140cfb87fce8f7a13f7cd860df041e6c12f7610f40cac6ec6fa2b65e96e4"
> +SRC_URI[main.sha256sum] =
> "a81a4ba593d0015e10c51e267de3ff07c7ac914dfca037d9517d029517097795"
> diff --git a/recipes-devtools/go/go-binary-native_1.25.2.bb b/recipes-
> devtools/go/go-binary-native_1.25.3.bb
> similarity index 79%
> rename from recipes-devtools/go/go-binary-native_1.25.2.bb
> rename to recipes-devtools/go/go-binary-native_1.25.3.bb
> index 2320731..79a0f5c 100644
> --- a/recipes-devtools/go/go-binary-native_1.25.2.bb
> +++ b/recipes-devtools/go/go-binary-native_1.25.3.bb
> @@ -9,9 +9,9 @@ PROVIDES = "go-native"
> 
>  # Checksums available at https://go.dev/dl/
>  SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-
> ${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
> -SRC_URI[go_linux_amd64.sha256sum] =
> "d7fa7f8fbd16263aa2501d681b11f972a5fd8e811f7b10cb9b26d031a3d7454b"
> -SRC_URI[go_linux_arm64.sha256sum] =
> "9aaeb044bf8dbf50ca2fbf0edc5ebc98b90d5bda8c6b2911526df76f61232919"
> -SRC_URI[go_linux_ppc64le.sha256sum] =
> "91dd35ac3f33baa642d9bac22b626bdb5ee0372cf80e7d782994337f81f34417"
> +SRC_URI[go_linux_amd64.sha256sum] =
> "0335f314b6e7bfe08c3d0cfaa7c19db961b7b99fb20be62b0a826c992ad14e0f"
> +SRC_URI[go_linux_arm64.sha256sum] =
> "1d42ebc84999b5e2069f5e31b67d6fc5d67308adad3e178d5a2ee2c9ff2001f5"
> +SRC_URI[go_linux_ppc64le.sha256sum] =
> "68d1a08bf3567f330717d821b266a0be1c5080bd05dc238b5a43a24ca0c47d7c"
> 
>  UPSTREAM_CHECK_URI = "https://golang.org/dl/"
>  UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
> diff --git a/recipes-devtools/go/go-cross-canadian_1.25.2.bb b/recipes-
> devtools/go/go-cross-canadian_1.25.3.bb
> similarity index 100%
> rename from recipes-devtools/go/go-cross-canadian_1.25.2.bb
> rename to recipes-devtools/go/go-cross-canadian_1.25.3.bb
> diff --git a/recipes-devtools/go/go-cross_1.25.2.bb b/recipes-devtools/go/go-
> cross_1.25.3.bb
> similarity index 100%
> rename from recipes-devtools/go/go-cross_1.25.2.bb
> rename to recipes-devtools/go/go-cross_1.25.3.bb
> diff --git a/recipes-devtools/go/go-crosssdk_1.25.2.bb b/recipes-devtools/go/go-
> crosssdk_1.25.3.bb
> similarity index 100%
> rename from recipes-devtools/go/go-crosssdk_1.25.2.bb
> rename to recipes-devtools/go/go-crosssdk_1.25.3.bb
> diff --git a/recipes-devtools/go/go-runtime_1.25.2.bb b/recipes-devtools/go/go-
> runtime_1.25.3.bb
> similarity index 100%
> rename from recipes-devtools/go/go-runtime_1.25.2.bb
> rename to recipes-devtools/go/go-runtime_1.25.3.bb
> diff --git a/recipes-devtools/go/go_1.25.2.bb b/recipes-devtools/go/go_1.25.3.bb
> similarity index 100%
> rename from recipes-devtools/go/go_1.25.2.bb
> rename to recipes-devtools/go/go_1.25.3.bb
diff mbox series

Patch

diff --git a/recipes-devtools/go/go-1.25.2.inc b/recipes-devtools/go/go-1.25.3.inc
similarity index 91%
rename from recipes-devtools/go/go-1.25.2.inc
rename to recipes-devtools/go/go-1.25.3.inc
index 9d1cf69..c29f4d6 100644
--- a/recipes-devtools/go/go-1.25.2.inc
+++ b/recipes-devtools/go/go-1.25.3.inc
@@ -18,4 +18,4 @@  SRC_URI += "\
     file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \
     file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \
 "
-SRC_URI[main.sha256sum] = "3711140cfb87fce8f7a13f7cd860df041e6c12f7610f40cac6ec6fa2b65e96e4"
+SRC_URI[main.sha256sum] = "a81a4ba593d0015e10c51e267de3ff07c7ac914dfca037d9517d029517097795"
diff --git a/recipes-devtools/go/go-binary-native_1.25.2.bb b/recipes-devtools/go/go-binary-native_1.25.3.bb
similarity index 79%
rename from recipes-devtools/go/go-binary-native_1.25.2.bb
rename to recipes-devtools/go/go-binary-native_1.25.3.bb
index 2320731..79a0f5c 100644
--- a/recipes-devtools/go/go-binary-native_1.25.2.bb
+++ b/recipes-devtools/go/go-binary-native_1.25.3.bb
@@ -9,9 +9,9 @@  PROVIDES = "go-native"
 
 # Checksums available at https://go.dev/dl/
 SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "d7fa7f8fbd16263aa2501d681b11f972a5fd8e811f7b10cb9b26d031a3d7454b"
-SRC_URI[go_linux_arm64.sha256sum] = "9aaeb044bf8dbf50ca2fbf0edc5ebc98b90d5bda8c6b2911526df76f61232919"
-SRC_URI[go_linux_ppc64le.sha256sum] = "91dd35ac3f33baa642d9bac22b626bdb5ee0372cf80e7d782994337f81f34417"
+SRC_URI[go_linux_amd64.sha256sum] = "0335f314b6e7bfe08c3d0cfaa7c19db961b7b99fb20be62b0a826c992ad14e0f"
+SRC_URI[go_linux_arm64.sha256sum] = "1d42ebc84999b5e2069f5e31b67d6fc5d67308adad3e178d5a2ee2c9ff2001f5"
+SRC_URI[go_linux_ppc64le.sha256sum] = "68d1a08bf3567f330717d821b266a0be1c5080bd05dc238b5a43a24ca0c47d7c"
 
 UPSTREAM_CHECK_URI = "https://golang.org/dl/"
 UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
diff --git a/recipes-devtools/go/go-cross-canadian_1.25.2.bb b/recipes-devtools/go/go-cross-canadian_1.25.3.bb
similarity index 100%
rename from recipes-devtools/go/go-cross-canadian_1.25.2.bb
rename to recipes-devtools/go/go-cross-canadian_1.25.3.bb
diff --git a/recipes-devtools/go/go-cross_1.25.2.bb b/recipes-devtools/go/go-cross_1.25.3.bb
similarity index 100%
rename from recipes-devtools/go/go-cross_1.25.2.bb
rename to recipes-devtools/go/go-cross_1.25.3.bb
diff --git a/recipes-devtools/go/go-crosssdk_1.25.2.bb b/recipes-devtools/go/go-crosssdk_1.25.3.bb
similarity index 100%
rename from recipes-devtools/go/go-crosssdk_1.25.2.bb
rename to recipes-devtools/go/go-crosssdk_1.25.3.bb
diff --git a/recipes-devtools/go/go-runtime_1.25.2.bb b/recipes-devtools/go/go-runtime_1.25.3.bb
similarity index 100%
rename from recipes-devtools/go/go-runtime_1.25.2.bb
rename to recipes-devtools/go/go-runtime_1.25.3.bb
diff --git a/recipes-devtools/go/go_1.25.2.bb b/recipes-devtools/go/go_1.25.3.bb
similarity index 100%
rename from recipes-devtools/go/go_1.25.2.bb
rename to recipes-devtools/go/go_1.25.3.bb