From patchwork Mon Oct 27 21:49:18 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Marko, Peter" X-Patchwork-Id: 73129 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D7D30CCF9EA for ; Mon, 27 Oct 2025 21:49:24 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.web11.3671.1761601762226942598 for ; Mon, 27 Oct 2025 14:49:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm2 header.b=Zc/FaCly; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-20251027214919c7e1e4f2930002071d-cbvdxy@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20251027214919c7e1e4f2930002071d for ; Mon, 27 Oct 2025 22:49:19 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=za0IGjo8JIM8ANFeShDjRDN1IE2c8LEaiqvD+H3Fdc8=; b=Zc/FaClyoXW4upOMaVVUb0lznYtAFLlqm6ZKF/egmfg8n253v2CdyPi7aNocYGwPBgKyhf DZMmKMSFoWMI7bi3vWDAvbPJzgHAyYoBZ4VMSh9qXNiTtf9M1vKHBSoFN+pp6haEFuq9kAig kFORWPfceSkMj6mVKVSEuHneBh94U07pTVc9YH74kaU+O5IYGQe1Sf4npIq1KjZGIVFHoX5D 4xtPMoVcHrvSHMxRgd+xYBU6hV6sc0aRKxFihswBkNNfvJkt2RqLOWtCbJK1qQFxgj2lCf+G dgqj6MUwZ/3OIsEWv5GdTPBgoxX8g/xmQGSmcFVXj+aJebAB8L68JjSg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: jose.quaresma@foundries.io, Peter Marko Subject: [meta-lts-mixins][kirkstone/go][PATCH] go: upgrade 1.25.2 -> 1.25.3 Date: Mon, 27 Oct 2025 22:49:18 +0100 Message-Id: <20251027214918.3984048-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 27 Oct 2025 21:49:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225365 Upgrade to latest 1.25.x release [1]: $ git --no-pager log --oneline go1.25.2..go1.25.3 28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3 e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187 79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date This release addresses breakage caused by a security patch included in Go 1.25.2 and 1.24.8, which enforced overly restrictive validation on the parsing of X.509 certificates. We've removed those restrictions while maintaining the security fix that the initial release addressed [2]. [1] https://github.com/golang/go/compare/go1.25.2...go1.25.3 [2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik (From OE-Core rev: d5f281bf13995117d98af809a2caea91e241713e) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc} | 2 +- ...o-binary-native_1.25.2.bb => go-binary-native_1.25.3.bb} | 6 +++--- ...cross-canadian_1.25.2.bb => go-cross-canadian_1.25.3.bb} | 0 .../go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb} | 0 .../go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb} | 0 .../go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb} | 0 recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb} | 0 7 files changed, 4 insertions(+), 4 deletions(-) rename recipes-devtools/go/{go-1.25.2.inc => go-1.25.3.inc} (91%) rename recipes-devtools/go/{go-binary-native_1.25.2.bb => go-binary-native_1.25.3.bb} (79%) rename recipes-devtools/go/{go-cross-canadian_1.25.2.bb => go-cross-canadian_1.25.3.bb} (100%) rename recipes-devtools/go/{go-cross_1.25.2.bb => go-cross_1.25.3.bb} (100%) rename recipes-devtools/go/{go-crosssdk_1.25.2.bb => go-crosssdk_1.25.3.bb} (100%) rename recipes-devtools/go/{go-runtime_1.25.2.bb => go-runtime_1.25.3.bb} (100%) rename recipes-devtools/go/{go_1.25.2.bb => go_1.25.3.bb} (100%) diff --git a/recipes-devtools/go/go-1.25.2.inc b/recipes-devtools/go/go-1.25.3.inc similarity index 91% rename from recipes-devtools/go/go-1.25.2.inc rename to recipes-devtools/go/go-1.25.3.inc index 9d1cf69..c29f4d6 100644 --- a/recipes-devtools/go/go-1.25.2.inc +++ b/recipes-devtools/go/go-1.25.3.inc @@ -18,4 +18,4 @@ SRC_URI += "\ file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \ file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \ " -SRC_URI[main.sha256sum] = "3711140cfb87fce8f7a13f7cd860df041e6c12f7610f40cac6ec6fa2b65e96e4" +SRC_URI[main.sha256sum] = "a81a4ba593d0015e10c51e267de3ff07c7ac914dfca037d9517d029517097795" diff --git a/recipes-devtools/go/go-binary-native_1.25.2.bb b/recipes-devtools/go/go-binary-native_1.25.3.bb similarity index 79% rename from recipes-devtools/go/go-binary-native_1.25.2.bb rename to recipes-devtools/go/go-binary-native_1.25.3.bb index 2320731..79a0f5c 100644 --- a/recipes-devtools/go/go-binary-native_1.25.2.bb +++ b/recipes-devtools/go/go-binary-native_1.25.3.bb @@ -9,9 +9,9 @@ PROVIDES = "go-native" # Checksums available at https://go.dev/dl/ SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}" -SRC_URI[go_linux_amd64.sha256sum] = "d7fa7f8fbd16263aa2501d681b11f972a5fd8e811f7b10cb9b26d031a3d7454b" -SRC_URI[go_linux_arm64.sha256sum] = "9aaeb044bf8dbf50ca2fbf0edc5ebc98b90d5bda8c6b2911526df76f61232919" -SRC_URI[go_linux_ppc64le.sha256sum] = "91dd35ac3f33baa642d9bac22b626bdb5ee0372cf80e7d782994337f81f34417" +SRC_URI[go_linux_amd64.sha256sum] = "0335f314b6e7bfe08c3d0cfaa7c19db961b7b99fb20be62b0a826c992ad14e0f" +SRC_URI[go_linux_arm64.sha256sum] = "1d42ebc84999b5e2069f5e31b67d6fc5d67308adad3e178d5a2ee2c9ff2001f5" +SRC_URI[go_linux_ppc64le.sha256sum] = "68d1a08bf3567f330717d821b266a0be1c5080bd05dc238b5a43a24ca0c47d7c" UPSTREAM_CHECK_URI = "https://golang.org/dl/" UPSTREAM_CHECK_REGEX = "go(?P\d+(\.\d+)+)\.linux" diff --git a/recipes-devtools/go/go-cross-canadian_1.25.2.bb b/recipes-devtools/go/go-cross-canadian_1.25.3.bb similarity index 100% rename from recipes-devtools/go/go-cross-canadian_1.25.2.bb rename to recipes-devtools/go/go-cross-canadian_1.25.3.bb diff --git a/recipes-devtools/go/go-cross_1.25.2.bb b/recipes-devtools/go/go-cross_1.25.3.bb similarity index 100% rename from recipes-devtools/go/go-cross_1.25.2.bb rename to recipes-devtools/go/go-cross_1.25.3.bb diff --git a/recipes-devtools/go/go-crosssdk_1.25.2.bb b/recipes-devtools/go/go-crosssdk_1.25.3.bb similarity index 100% rename from recipes-devtools/go/go-crosssdk_1.25.2.bb rename to recipes-devtools/go/go-crosssdk_1.25.3.bb diff --git a/recipes-devtools/go/go-runtime_1.25.2.bb b/recipes-devtools/go/go-runtime_1.25.3.bb similarity index 100% rename from recipes-devtools/go/go-runtime_1.25.2.bb rename to recipes-devtools/go/go-runtime_1.25.3.bb diff --git a/recipes-devtools/go/go_1.25.2.bb b/recipes-devtools/go/go_1.25.3.bb similarity index 100% rename from recipes-devtools/go/go_1.25.2.bb rename to recipes-devtools/go/go_1.25.3.bb