2019-09-30 10:41:22 -04:00
%global debug_package %{nil}
%global _binaries_in_noarch_packages_terminate_build 0
2019-12-13 15:19:17 +08:00
%global golibdir %{_libdir} /golang
%global goroot /usr/lib/%{name}
2021-04-20 17:14:23 +08:00
%global go_api 1.15
%global go_version 1.15
2019-12-13 15:19:17 +08:00
%global __spec_install_post /usr/lib/rpm/check-rpaths /usr/lib/rpm/check-buildroot /usr/lib/rpm/brp-compress
2019-09-30 10:41:22 -04:00
%global __requires_exclude_from ^(%{_datadir} |/usr/lib)/%{name} /(doc|src)/.*$
%global __strip /bin/true
%define _use_internal_dependency_generator 0
%define __find_requires %{nil}
2019-12-13 15:19:17 +08:00
%bcond_with bootstrap
%ifarch x86_64 aarch64
%bcond_without ignore_tests
%else
%bcond_with ignore_tests
%endif
2019-09-30 10:41:22 -04:00
%ifarch x86_64 aarch64
%global external_linker 1
%else
%global external_linker 0
%endif
%ifarch x86_64 aarch64
%global cgo_enabled 1
%else
%global cgo_enabled 0
%endif
%if %{with bootstrap}
%global golang_bootstrap 0
%else
%global golang_bootstrap 1
%endif
%if %{with ignore_tests}
%global fail_on_tests 0
%else
%global fail_on_tests 1
%endif
%ifarch x86_64 aarch64
%global shared 1
%else
%global shared 0
%endif
%ifarch x86_64
%global race 1
%else
%global race 0
%endif
%ifarch x86_64
2019-12-13 15:19:17 +08:00
%global gohostarch amd64
2019-09-30 10:41:22 -04:00
%endif
%ifarch aarch64
2019-12-13 15:19:17 +08:00
%global gohostarch arm64
2019-09-30 10:41:22 -04:00
%endif
Name : golang
2021-03-12 16:17:36 +08:00
Version : 1.15.7
golang: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
Conflict:
CVE-2022-1962: src/go/parser/parser.go
CVE-2022-1705: src/net/http/transfer.go
CVE-2022-30634: src/crypto/rand/rand.go, src/crypto/rand/rand_windows.go
Score:
CVE-2022-32148: 5.3
CVE-2022-1962: 6.2
CVE-2022-1705: 5.3
CVE-2022-30633: 6.2
CVE-2022-30635: 5.5
CVE-2022-30632: 6.2
CVE-2022-28131: 6.2
CVE-2022-30631: 7.5
CVE-2022-30629: 2.6
CVE-2022-30634: 7.5
Reference:
CVE-2022-32148: https://go-review.googlesource.com/c/go/+/415221
CVE-2022-1962: https://go-review.googlesource.com/c/go/+/417070
CVE-2022-1705: https://go-review.googlesource.com/c/go/+/415217
CVE-2022-30633: https://go-review.googlesource.com/c/go/+/417069
CVE-2022-30635: https://go-review.googlesource.com/c/go/+/417074
CVE-2022-30632: https://go-review.googlesource.com/c/go/+/417073
CVE-2022-28131: https://go-review.googlesource.com/c/go/+/417068
CVE-2022-30631: https://go-review.googlesource.com/c/go/+/417071
CVE-2022-30629: https://go-review.googlesource.com/c/go/+/408574
CVE-2022-30634: https://go-review.googlesource.com/c/go/+/406635
Reason: fix CVE
CVE-2022-32148: 0064-release-branch.go1.17-net-http-preserve-nil-values-i.patch
CVE-2022-1962: 0065-release-branch.go1.17-go-parser-limit-recursion-dept.patch
CVE-2022-1705: 0066-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
CVE-2022-30633: 0067-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
CVE-2022-30635: 0068-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
CVE-2022-30632: 0069-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
CVE-2022-28131: 0070-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
CVE-2022-30631: 0071-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
CVE-2022-30629: 0072-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
CVE-2022-30634: 0073-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-07-26 22:11:39 +08:00
Release : 14
2019-09-30 10:41:22 -04:00
Summary : The Go Programming Language
License : BSD and Public Domain
2020-08-18 20:36:44 +08:00
URL : https://golang.org/
2019-12-29 15:43:54 +08:00
Source0 : https://dl.google.com/go/go%{version} .src.tar.gz
2019-09-30 10:41:22 -04:00
%if !%{golang_bootstrap}
BuildRequires : gcc-go >= 5
%else
BuildRequires : golang > 1.4
%endif
BuildRequires : hostname
# for tests
BuildRequires : pcre-devel, glibc-static, perl-interpreter, procps-ng
Provides : go = %{version} -%{release}
Requires : %{name} -devel = %{version} -%{release}
2019-12-13 15:19:17 +08:00
2019-09-30 10:41:22 -04:00
Obsoletes : %{name} -pkg-bin-linux-386 < 1.4.99
Obsoletes : %{name} -pkg-bin-linux-amd64 < 1.4.99
Obsoletes : %{name} -pkg-bin-linux-arm < 1.4.99
Obsoletes : %{name} -pkg-linux-386 < 1.4.99
Obsoletes : %{name} -pkg-linux-amd64 < 1.4.99
Obsoletes : %{name} -pkg-linux-arm < 1.4.99
2019-12-13 15:19:17 +08:00
Obsoletes : %{name} -vet < 0-12.1
Obsoletes : %{name} -cover < 0-12.1
2019-09-30 10:41:22 -04:00
Requires(post) : %{_sbindir} /update-alternatives
Requires(postun) : %{_sbindir} /update-alternatives
2020-02-20 18:22:53 +08:00
Requires : glibc gcc git subversion
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
# generated by:
2019-09-30 10:41:22 -04:00
# go list -f {{.ImportPath}} ./src/vendor/... | sed "s:_$PWD/src/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):" && go list -f {{.ImportPath}} ./src/cmd/vendor/... | sed "s:_$PWD/src/cmd/vendor/::g;s:_:.:;s:.*:Provides\: bundled(golang(&)):"
Provides : bundled(golang(golang.org/x/crypto/chacha20poly1305))
Provides : bundled(golang(golang.org/x/crypto/cryptobyte))
Provides : bundled(golang(golang.org/x/crypto/cryptobyte/asn1))
Provides : bundled(golang(golang.org/x/crypto/curve25519))
Provides : bundled(golang(golang.org/x/crypto/internal/chacha20))
Provides : bundled(golang(golang.org/x/crypto/poly1305))
Provides : bundled(golang(golang.org/x/net/dns/dnsmessage))
Provides : bundled(golang(golang.org/x/net/http/httpguts))
Provides : bundled(golang(golang.org/x/net/http/httpproxy))
Provides : bundled(golang(golang.org/x/net/http2/hpack))
Provides : bundled(golang(golang.org/x/net/idna))
Provides : bundled(golang(golang.org/x/net/internal/nettest))
Provides : bundled(golang(golang.org/x/net/nettest))
Provides : bundled(golang(golang.org/x/text/secure))
Provides : bundled(golang(golang.org/x/text/secure/bidirule))
Provides : bundled(golang(golang.org/x/text/transform))
Provides : bundled(golang(golang.org/x/text/unicode))
Provides : bundled(golang(golang.org/x/text/unicode/bidi))
Provides : bundled(golang(golang.org/x/text/unicode/norm))
Provides : bundled(golang(github.com/google/pprof/driver))
Provides : bundled(golang(github.com/google/pprof/internal/binutils))
Provides : bundled(golang(github.com/google/pprof/internal/driver))
Provides : bundled(golang(github.com/google/pprof/internal/elfexec))
Provides : bundled(golang(github.com/google/pprof/internal/graph))
Provides : bundled(golang(github.com/google/pprof/internal/measurement))
Provides : bundled(golang(github.com/google/pprof/internal/plugin))
Provides : bundled(golang(github.com/google/pprof/internal/proftest))
Provides : bundled(golang(github.com/google/pprof/internal/report))
Provides : bundled(golang(github.com/google/pprof/internal/symbolizer))
Provides : bundled(golang(github.com/google/pprof/internal/symbolz))
Provides : bundled(golang(github.com/google/pprof/profile))
Provides : bundled(golang(github.com/google/pprof/third.party/d3))
Provides : bundled(golang(github.com/google/pprof/third.party/d3flamegraph))
Provides : bundled(golang(github.com/google/pprof/third.party/svgpan))
Provides : bundled(golang(github.com/ianlancetaylor/demangle))
Provides : bundled(golang(golang.org/x/arch/arm/armasm))
Provides : bundled(golang(golang.org/x/arch/arm64/arm64asm))
Provides : bundled(golang(golang.org/x/arch/ppc64/ppc64asm))
Provides : bundled(golang(golang.org/x/arch/x86/x86asm))
Provides : bundled(golang(golang.org/x/crypto/ssh/terminal))
Provides : bundled(golang(golang.org/x/sys/unix))
Provides : bundled(golang(golang.org/x/sys/windows))
Provides : bundled(golang(golang.org/x/sys/windows/registry))
2019-12-13 15:19:17 +08:00
2019-09-30 10:41:22 -04:00
Provides : %{name} -bin = %{version} -%{release}
Obsoletes : %{name} -bin
Obsoletes : %{name} -shared
Obsoletes : %{name} -docs
Obsoletes : %{name} -data < 1.1.1-4
Obsoletes : %{name} -vim < 1.4
Obsoletes : emacs-%{name} < 1.4
2019-12-13 15:19:17 +08:00
Requires : openEuler-rpm-config
2019-09-30 10:41:22 -04:00
ExclusiveArch : %{golang_arches}
2021-06-18 15:46:44 +08:00
Patch6001 : 0001-release-branch.go1.15-doc-go1.15-mention-1.15.3-cgo-.patch
Patch6002 : 0002-release-branch.go1.15-cmd-go-fix-mod_get_fallback-te.patch
Patch6003 : 0003-release-branch.go1.15-internal-execabs-only-run-test.patch
Patch6004 : 0004-release-branch.go1.15-cmd-compile-don-t-short-circui.patch
Patch6005 : 0005-release-branch.go1.15-cmd-go-fix-get_update_unknown_.patch
Patch6006 : 0006-release-branch.go1.15-net-http-update-bundled-x-net-.patch
Patch6007 : 0007-release-branch.go1.15-cmd-go-don-t-lookup-the-path-f.patch
Patch6008 : 0008-release-branch.go1.15-cmd-link-internal-ld-pe-fix-se.patch
Patch6009 : 0009-release-branch.go1.15-cmd-internal-goobj2-fix-buglet.patch
Patch6010 : 0010-release-branch.go1.15-runtime-don-t-adjust-timer-pp-.patch
Patch6011 : 0011-release-branch.go1.15-runtime-cgo-fix-Android-build-.patch
Patch6013 : 0013-release-branch.go1.15-internal-poll-if-copy_file_ran.patch
Patch6014 : 0014-release-branch.go1.15-internal-poll-netpollcheckerr-.patch
Patch6015 : 0015-release-branch.go1.15-cmd-compile-do-not-assume-TST-.patch
Patch6016 : 0016-release-branch.go1.15-syscall-do-not-overflow-key-me.patch
Patch6017 : 0017-release-branch.go1.15-time-correct-unusual-extension.patch
Patch6018 : 0018-release-branch.go1.15-cmd-compile-fix-escape-analysi.patch
Patch6019 : 0019-release-branch.go1.15-net-http-ignore-connection-clo.patch
Patch6020 : 0020-release-branch.go1.15-net-http-add-connections-back-.patch
Patch6021 : 0021-release-branch.go1.15-security-encoding-xml-prevent-.patch
Patch6023 : 0023-release-branch.go1.15-cmd-go-don-t-report-missing-st.patch
Patch6025 : 0025-release-branch.go1.15-cmd-go-internal-modfetch-detec.patch
Patch6026 : 0026-release-branch.go1.15-cmd-link-generate-trampoline-f.patch
Patch6027 : 0027-release-branch.go1.15-net-http-update-bundled-x-net-.patch
Patch6028 : 0028-release-branch.go1.15-net-http-fix-detection-of-Roun.patch
Patch6029 : 0029-release-branch.go1.15-build-set-GOPATH-consistently-.patch
Patch6030 : 0030-release-branch.go1.15-database-sql-fix-tx-stmt-deadl.patch
Patch6031 : 0031-release-branch.go1.15-cmd-compile-disable-shortcircu.patch
Patch6032 : 0032-release-branch.go1.15-runtime-non-strict-InlTreeInde.patch
Patch6033 : 0033-release-branch.go1.15-cmd-cgo-avoid-exporting-all-sy.patch
Patch6034 : 0034-release-branch.go1.15-cmd-link-avoid-exporting-all-s.patch
Patch6035 : 0035-release-branch.go1.15-cmd-cgo-remove-unnecessary-spa.patch
Patch6037 : 0037-release-branch.go1.15-time-use-offset-and-isDST-when.patch
Patch6038 : 0038-release-branch.go1.15-std-update-golang.org-x-net-to.patch
Patch6039 : 0039-release-branch.go1.15-runtime-time-disable-preemptio.patch
Patch6040 : 0040-release-branch.go1.15-runtime-non-strict-InlTreeInde.patch
Patch6041 : 0041-release-branch.go1.15-runtime-pprof-skip-tests-for-A.patch
Patch6043 : 0043-release-branch.go1.15-math-big-fix-TestShiftOverlap-.patch
Patch6044 : 0044-release-branch.go1.15-math-big-remove-the-s390x-asse.patch
Patch6045 : 0045-net-http-fix-hijack-hang-at-abortPendingRead.patch
2021-10-27 10:46:53 +08:00
Patch6046 : 0046-release-branch.go1.15-net-verify-results-from-Lookup.patch
Patch6047 : 0047-release-branch.go1.15-archive-zip-only-preallocate-F.patch
Patch6048 : 0048-release-branch.go1.15-net-http-httputil-always-remov.patch
Patch6049 : 0049-release-branch.go1.15-math-big-check-for-excessive-e.patch
Patch6050 : 0050-release-branch.go1.15-crypto-tls-test-key-type-when-.patch
Patch6051 : 0051-net-reject-leading-zeros-in-IP-address-parsers.patch
Patch6052 : 0052-release-branch.go1.16-misc-wasm-cmd-link-do-not-let-.patch
Patch6053 : 0053-net-http-httputil-close-incoming-ReverseProxy-reques.patch
2022-01-19 16:24:38 +08:00
Patch6054 : 0054-release-branch.go1.16-net-http-update-bundled-golang.patch
2022-02-08 11:07:36 +08:00
Patch6055 : 0055-release-branch.go1.16-archive-zip-prevent-preallocat.patch
2022-03-02 11:38:36 +08:00
Patch6056 : 0056-release-branch.go1.16-debug-macho-fail-on-invalid-dy.patch
2022-03-04 17:03:21 +08:00
Patch6057 : 0057-release-branch.go1.16-math-big-prevent-overflow-in-R.patch
Patch6058 : 0058-release-branch.go1.16-crypto-elliptic-make-IsOnCurve.patch
2022-03-14 15:59:38 +08:00
Patch6059 : 0059-release-branch.go1.16-regexp-syntax-reject-very-deep.patch
2022-03-24 11:25:50 +08:00
Patch6060 : 0060-cmd-go-internal-modfetch-do-not-short-circuit-canoni.patch
2022-05-11 19:41:07 +08:00
Patch6061 : 0061-release-branch.go1.17-crypto-elliptic-tolerate-zero-.patch
Patch6062 : 0062-release-branch.go1.17-encoding-pem-fix-stack-overflo.patch
2022-05-16 15:03:09 +08:00
Patch6063 : 0063-release-branch.go1.16-syscall-fix-ForkLock-spurious-.patch
golang: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
Conflict:
CVE-2022-1962: src/go/parser/parser.go
CVE-2022-1705: src/net/http/transfer.go
CVE-2022-30634: src/crypto/rand/rand.go, src/crypto/rand/rand_windows.go
Score:
CVE-2022-32148: 5.3
CVE-2022-1962: 6.2
CVE-2022-1705: 5.3
CVE-2022-30633: 6.2
CVE-2022-30635: 5.5
CVE-2022-30632: 6.2
CVE-2022-28131: 6.2
CVE-2022-30631: 7.5
CVE-2022-30629: 2.6
CVE-2022-30634: 7.5
Reference:
CVE-2022-32148: https://go-review.googlesource.com/c/go/+/415221
CVE-2022-1962: https://go-review.googlesource.com/c/go/+/417070
CVE-2022-1705: https://go-review.googlesource.com/c/go/+/415217
CVE-2022-30633: https://go-review.googlesource.com/c/go/+/417069
CVE-2022-30635: https://go-review.googlesource.com/c/go/+/417074
CVE-2022-30632: https://go-review.googlesource.com/c/go/+/417073
CVE-2022-28131: https://go-review.googlesource.com/c/go/+/417068
CVE-2022-30631: https://go-review.googlesource.com/c/go/+/417071
CVE-2022-30629: https://go-review.googlesource.com/c/go/+/408574
CVE-2022-30634: https://go-review.googlesource.com/c/go/+/406635
Reason: fix CVE
CVE-2022-32148: 0064-release-branch.go1.17-net-http-preserve-nil-values-i.patch
CVE-2022-1962: 0065-release-branch.go1.17-go-parser-limit-recursion-dept.patch
CVE-2022-1705: 0066-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
CVE-2022-30633: 0067-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
CVE-2022-30635: 0068-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
CVE-2022-30632: 0069-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
CVE-2022-28131: 0070-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
CVE-2022-30631: 0071-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
CVE-2022-30629: 0072-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
CVE-2022-30634: 0073-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-07-26 22:11:39 +08:00
Patch6064 : 0064-release-branch.go1.17-net-http-preserve-nil-values-i.patch
Patch6065 : 0065-release-branch.go1.17-go-parser-limit-recursion-dept.patch
Patch6066 : 0066-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
Patch6067 : 0067-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
Patch6068 : 0068-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
Patch6069 : 0069-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
Patch6070 : 0070-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
Patch6071 : 0071-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
Patch6072 : 0072-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
Patch6073 : 0073-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-05-11 19:41:07 +08:00
2021-06-18 15:46:44 +08:00
Patch9001 : 0001-drop-hard-code-cert.patch
2022-03-24 11:25:50 +08:00
Patch9002 : 0002-fix-patch-cmd-go-internal-modfetch-do-not-sho.patch
2021-06-18 15:46:44 +08:00
2019-09-30 10:41:22 -04:00
%description
%{summary} .
%package help
Summary : Golang compiler helps and manual docs
Requires : %{name} = %{version} -%{release}
BuildArch : noarch
Provides : %{name} -docs = %{version} -%{release}
Obsoletes : %{name} -docs
Provides : %{name} -shared = %{version} -%{release}
Obsoletes : %{name} -shared
%description help
%{summary} .
%package devel
Summary : Golang compiler devel
BuildArch : noarch
2019-12-13 15:19:17 +08:00
Requires : %{name} = %{version} -%{release}
2019-09-30 10:41:22 -04:00
Provides : %{name} -src = %{version} -%{release}
Obsoletes : %{name} -src
Provides : %{name} -tests = %{version} -%{release}
Obsoletes : %{name} -tests
Provides : %{name} -misc = %{version} -%{release}
Obsoletes : %{name} -misc
Obsoletes : %{name} -race = %{version} -%{release}
%description devel
%{summary} .
# Workaround old RPM bug of symlink-replaced-with-dir failure
%pretrans -p <lua>
for _,d in pairs({" a p i " , " d o c " , " i n c l u d e " , " l i b " , " s r c " }) do
path = " %{goroot} / " .. d
if posix.stat(path, " t y p e " ) == " l i n k " then
os.remove(path)
posix.mkdir(path)
end
end
%prep
%autosetup -n go -p1
%build
uname -a
cat /proc/cpuinfo
cat /proc/meminfo
%if !%{golang_bootstrap}
export GOROOT_BOOTSTRAP=/
%else
export GOROOT_BOOTSTRAP=%{goroot}
%endif
export GOROOT_FINAL=%{goroot}
export GOHOSTOS=linux
export GOHOSTARCH=%{gohostarch}
pushd src
export CFLAGS=" $RPM_OPT_FLAGS "
export LDFLAGS=" $RPM_LD_FLAGS "
export CC=" g c c "
export CC_FOR_TARGET=" g c c "
export GOOS=linux
export GOARCH=%{gohostarch}
%if !%{external_linker}
export GO_LDFLAGS=" - l i n k m o d e i n t e r n a l "
%endif
%if !%{cgo_enabled}
export CGO_ENABLED=0
%endif
%ifarch aarch64
export GO_LDFLAGS=" - s - w "
%endif
./make.bash --no-clean -v
popd
%if %{shared}
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -buildmode=shared -v -x std
%endif
%if %{race}
GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -race -v -x std
%endif
%install
2019-12-13 15:19:17 +08:00
rm -rf %{buildroot}
2019-09-30 10:41:22 -04:00
rm -rf pkg/obj/go-build/*
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{_bindir}
mkdir -p %{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
cp -apv api bin doc favicon.ico lib pkg robots.txt src misc test VERSION \
2019-12-13 15:19:17 +08:00
%{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
# bz1099206
2019-12-13 15:19:17 +08:00
find %{buildroot} %{goroot} /src -exec touch -r %{buildroot} %{goroot} /VERSION " { } " \;
2019-09-30 10:41:22 -04:00
# and level out all the built archives
2019-12-13 15:19:17 +08:00
touch %{buildroot} %{goroot} /pkg
find %{buildroot} %{goroot} /pkg -exec touch -r %{buildroot} %{goroot} /pkg " { } " \;
2019-09-30 10:41:22 -04:00
# generate the spec file ownership of this source tree and packages
cwd=$(pwd)
src_list=$cwd/go-src.list
pkg_list=$cwd/go-pkg.list
shared_list=$cwd/go-shared.list
race_list=$cwd/go-race.list
misc_list=$cwd/go-misc.list
docs_list=$cwd/go-docs.list
tests_list=$cwd/go-tests.list
rm -f $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
touch $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list
2019-12-13 15:19:17 +08:00
pushd %{buildroot} %{goroot}
2019-09-30 10:41:22 -04:00
find src/ -type d -a \( ! -name testdata -a ! -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $src_list
find src/ ! -type d -a \( ! -ipath '*/testdata/*' -a ! -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $src_list
find bin/ pkg/ -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%%%dir %{goroot}/%p\n' >> $pkg_list
find bin/ pkg/ ! -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%{goroot}/%p\n' >> $pkg_list
find doc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $docs_list
find doc/ ! -type d -printf '%{goroot}/%p\n' >> $docs_list
find misc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $misc_list
find misc/ ! -type d -printf '%{goroot}/%p\n' >> $misc_list
%if %{shared}
mkdir -p %{buildroot} /%{_libdir} /
mkdir -p %{buildroot} /%{golibdir} /
for file in $(find . -iname " * . s o " ); do
chmod 755 $file
mv $file %{buildroot} /%{golibdir}
pushd $(dirname $file)
ln -fs %{golibdir} /$(basename $file) $(basename $file)
popd
echo " % %{goroot} / $ f i l e " >> $shared_list
echo " % %{golibdir} / $ ( b a s e n a m e $ f i l e ) " >> $shared_list
done
find pkg/*_dynlink/ -type d -printf '%%%dir %{goroot}/%p\n' >> $shared_list
find pkg/*_dynlink/ ! -type d -printf '%{goroot}/%p\n' >> $shared_list
%endif
%if %{race}
find pkg/*_race/ -type d -printf '%%%dir %{goroot}/%p\n' >> $race_list
find pkg/*_race/ ! -type d -printf '%{goroot}/%p\n' >> $race_list
%endif
find test/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find test/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
find src/ -type d -a \( -name testdata -o -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find src/ ! -type d -a \( -ipath '*/testdata/*' -o -name '*_test.go' \) -printf '%{goroot}/%p\n' >> $tests_list
# this is only the zoneinfo.zip
find lib/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list
find lib/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list
popd
2019-12-13 15:19:17 +08:00
rm -rfv %{buildroot} %{goroot} /doc/Makefile
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{goroot} /bin/linux_%{gohostarch}
ln -sf %{goroot} /bin/go %{buildroot} %{goroot} /bin/linux_%{gohostarch} /go
ln -sf %{goroot} /bin/gofmt %{buildroot} %{goroot} /bin/linux_%{gohostarch} /gofmt
2019-09-30 10:41:22 -04:00
2019-12-13 15:19:17 +08:00
mkdir -p %{buildroot} %{gopath} /src/github.com
mkdir -p %{buildroot} %{gopath} /src/bitbucket.org
mkdir -p %{buildroot} %{gopath} /src/code.google.com/p
mkdir -p %{buildroot} %{gopath} /src/golang.org/x
2019-09-30 10:41:22 -04:00
%check
export GOROOT=$(pwd -P)
export PATH=" $ G O R O O T " /bin:" $ P A T H "
cd src
export CC=" g c c "
export CFLAGS=" $RPM_OPT_FLAGS "
export LDFLAGS=" $RPM_LD_FLAGS "
%if !%{external_linker}
export GO_LDFLAGS=" - l i n k m o d e i n t e r n a l "
%endif
%if !%{cgo_enabled} || !%{external_linker}
export CGO_ENABLED=0
%endif
export GO_TEST_TIMEOUT_SCALE=2
%if %{fail_on_tests}
echo tests ignored
%else
2021-04-15 15:40:15 +08:00
./run.bash --no-rebuild -v -v -v -k go_test:testing || :
2019-09-30 10:41:22 -04:00
%endif
cd ..
%post
%{_sbindir} /update-alternatives --install %{_bindir} /go \
go %{goroot} /bin/go 90 \
--slave %{_bindir} /gofmt gofmt %{goroot} /bin/gofmt
%preun
if [ $1 = 0 ]; then
%{_sbindir} /update-alternatives --remove go %{goroot} /bin/go
fi
%files -f go-pkg.list
%doc AUTHORS CONTRIBUTORS LICENSE PATENTS
%doc %{goroot} /VERSION
%dir %{goroot} /doc
%doc %{goroot} /doc/*
%dir %{goroot}
%exclude %{goroot} /src/
%exclude %{goroot} /doc/
%exclude %{goroot} /misc/
%exclude %{goroot} /test/
%{goroot} /*
%dir %{gopath}
%dir %{gopath} /src
%dir %{gopath} /src/github.com/
%dir %{gopath} /src/bitbucket.org/
%dir %{gopath} /src/code.google.com/
%dir %{gopath} /src/code.google.com/p/
%dir %{gopath} /src/golang.org
%dir %{gopath} /src/golang.org/x
%files help -f go-docs.list -f go-shared.list
%files devel -f go-tests.list -f go-misc.list -f go-src.list
%changelog
golang: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
Conflict:
CVE-2022-1962: src/go/parser/parser.go
CVE-2022-1705: src/net/http/transfer.go
CVE-2022-30634: src/crypto/rand/rand.go, src/crypto/rand/rand_windows.go
Score:
CVE-2022-32148: 5.3
CVE-2022-1962: 6.2
CVE-2022-1705: 5.3
CVE-2022-30633: 6.2
CVE-2022-30635: 5.5
CVE-2022-30632: 6.2
CVE-2022-28131: 6.2
CVE-2022-30631: 7.5
CVE-2022-30629: 2.6
CVE-2022-30634: 7.5
Reference:
CVE-2022-32148: https://go-review.googlesource.com/c/go/+/415221
CVE-2022-1962: https://go-review.googlesource.com/c/go/+/417070
CVE-2022-1705: https://go-review.googlesource.com/c/go/+/415217
CVE-2022-30633: https://go-review.googlesource.com/c/go/+/417069
CVE-2022-30635: https://go-review.googlesource.com/c/go/+/417074
CVE-2022-30632: https://go-review.googlesource.com/c/go/+/417073
CVE-2022-28131: https://go-review.googlesource.com/c/go/+/417068
CVE-2022-30631: https://go-review.googlesource.com/c/go/+/417071
CVE-2022-30629: https://go-review.googlesource.com/c/go/+/408574
CVE-2022-30634: https://go-review.googlesource.com/c/go/+/406635
Reason: fix CVE
CVE-2022-32148: 0064-release-branch.go1.17-net-http-preserve-nil-values-i.patch
CVE-2022-1962: 0065-release-branch.go1.17-go-parser-limit-recursion-dept.patch
CVE-2022-1705: 0066-release-branch.go1.17-net-http-don-t-strip-whitespac.patch
CVE-2022-30633: 0067-release-branch.go1.17-encoding-xml-limit-depth-of-ne.patch
CVE-2022-30635: 0068-release-branch.go1.17-encoding-gob-add-a-depth-limit.patch
CVE-2022-30632: 0069-release-branch.go1.17-path-filepath-fix-stack-exhaus.patch
CVE-2022-28131: 0070-release-branch.go1.17-encoding-xml-use-iterative-Ski.patch
CVE-2022-30631: 0071-release-branch.go1.17-compress-gzip-fix-stack-exhaus.patch
CVE-2022-30629: 0072-release-branch.go1.17-crypto-tls-randomly-generate-t.patch
CVE-2022-30634: 0073-release-branch.go1.17-crypto-rand-properly-handle-la.patch
2022-07-26 22:11:39 +08:00
* Thu Jul 26 2022 hanchao<hanchao47@huawei.com> - 1.15.7-14
- fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
CVE-2022-30631,CVE-2022-30629,CVE-2022-30634
2022-05-16 15:03:09 +08:00
* Thu May 12 2022 hanchao<hanchao47@huawei.com> - 1.15.7-13
- fix CVE-2021-44717
2022-05-11 19:41:07 +08:00
* Wed May 11 2022 hanchao<hanchao47@huawei.com> - 1.15.7-12
- fix CVE-2022-28327 CVE-2022-24675
2022-03-24 11:25:50 +08:00
* Thu Mar 24 2022 hanchao<hanchao47@huawei.com> - 1.15.7-11
- fix CVE-2022-23773
2022-03-14 15:59:38 +08:00
* Fri Mar 11 2022 hanchao<hanchao47@huawei.com> - 1.15.7-10
- fix CVE-2022-24921
2022-03-04 17:03:21 +08:00
* Fri Mar 4 2022 hanchao<hanchao47@huawei.com> - 1.15.7-9
- fix CVE-2022-23772 CVE-2022-23806
2022-03-02 11:38:36 +08:00
* Wed Mar 2 2022 hanchao<hanchao47@huawei.com> - 1.15.7-8
- fix CVE-2021-41771
2022-02-08 11:07:36 +08:00
* Tue Feb 8 2022 hanchao<hanchao47@huawei.com> - 1.15.7-7
- fix CVE-2021-39293
2022-01-19 16:24:38 +08:00
* Wed Jan 19 2022 hanchao<hanchao47@huawei.com> - 1.15.7-6
- fix CVE-2021-44716
2021-10-27 10:46:53 +08:00
* Wed Oct 27 2021 chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
- fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221
2021-06-18 15:46:44 +08:00
* Fri Jun 18 2021 chenjiankun <chenjiankun1@huawei.com> - 1.15.7-4
- batch synchronization
2021-04-20 17:14:23 +08:00
* Fri Apr 23 2021 chenjiankun <chenjiankun1@huawei.com> - 1.15.7-3
- fix CVE-2021-27918
2021-04-15 15:40:15 +08:00
* Thu Apr 15 2021 lixiang <lixiang172@huawei.com> - 1.15.7-2
- speed up build progress
2021-03-12 16:17:36 +08:00
* Thu Jan 28 2021 xingweizheng <xingweizheng@huawei.com> - 1.15.7-1
- upgrade to 1.15.7
2021-02-18 19:12:57 +08:00
2021-01-18 17:37:07 +08:00
* Mon Jan 18 2021 jingrui<jingrui@huawei.com> - 1.13.15-2
- sync cve fix
* Tue Aug 18 2020 xiadanni <xiadanni1@huawei.com> - 1.13.15-1
2020-08-18 20:36:44 +08:00
- upgrade to 1.13.15
2020-05-12 17:06:52 +08:00
* Tue May 12 2020 lixiang <lixiang172@huawei.com> - 1.13.6
- rename tar name and make it same with upstream
* Tue Mar 17 2020 jingrui <jingrui@huawei.com> - 1.13.5
- drop hard code cert
2020-03-23 09:50:53 +08:00
* Mon Mar 23 2020 jingrui <jingrui@huawei.com> - 1.13.4
- fix CVE-2020-7919
2020-02-20 18:22:53 +08:00
* Thu Feb 20 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.13-3.2
- requires remove mercurial
* Tue Dec 10 2019 jingrui<jingrui@huawei.com> - 1.13-3.1
2019-12-13 15:19:17 +08:00
- upgrade to golang 1.13.3
2019-09-30 10:41:22 -04:00
* Tue Sep 03 2019 leizhongkai<leizhongkai@huawei.com> - 1.11-1
- backport fix CVE-2019-9512 and CVE-2019-9514