Skip to content

Commit

Permalink
go_1_10: 1.10 -> 1.10.1
Browse files Browse the repository at this point in the history
This updates go to the latest version of the golang 1.10 branch.
A few minor (but important) things are fixed in this version:

* CVE-2018-7187 - arbitrary code execution in `go get` (when used with
  --insecure) [1]
* Extended Key Usage verification in client certificate scenarios [3]
* a bunch of stability changes

The full list of changes can se been on GitHub [2] & [4].

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7187
[2] https://github.com/golang/go/issues?q=milestone%3AGo1.10.1
[3] golang/go#23884
[4] golang/go#24563

(cherry picked from commit 568d30b)
  • Loading branch information
andir authored and Mic92 committed Apr 4, 2018
1 parent d78695d commit ba49d72
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions pkgs/development/compilers/go/1.10.nix
Original file line number Diff line number Diff line change
Expand Up @@ -25,13 +25,13 @@ in

stdenv.mkDerivation rec {
name = "go-${version}";
version = "1.10";
version = "1.10.1";

src = fetchFromGitHub {
owner = "golang";
repo = "go";
rev = "go${version}";
sha256 = "1dzs1mz3zxgg1qyi2lrlxdz1lsvazxvmj9cb69pgqnwjlh3jpw0l";
sha256 = "1wqwy52ibb343a4v7b9q26xa6r5jk4khfxd90wbpcayws8cxly8m";
};

# perl is used for testing go vet
Expand Down

0 comments on commit ba49d72

Please sign in to comment.