Re: [OE-core] [kirkstone][PATCH 3/3] go: fix CVE-2023-29406

2023-08-02 Thread Steve Sakoman
There is already a patch for this CVE in kirkstone: https://git.yoctoproject.org/poky/commit/?h=kirkstone=4596433a54c12ee229e923ae39e3ec0d16d6f067 So I've dropped this patch from your series and adjusted the other two to take into account the above commit. Thanks! Steve On Tue, Aug 1, 2023 at

[OE-core] [kirkstone][PATCH 3/3] go: fix CVE-2023-29406

2023-08-01 Thread Sakib Sajal via lists.openembedded.org
Backport required patch to fix CVE-2023-29406. Signed-off-by: Sakib Sajal --- meta/recipes-devtools/go/go-1.17.13.inc | 1 + .../go/go-1.19/CVE-2023-29406.patch | 210 ++ 2 files changed, 211 insertions(+) create mode 100644