Skip to content

Conversation

@jefferyto
Copy link
Member

@jefferyto jefferyto commented Dec 28, 2021

Maintainer: me
Compile tested: armvirt-32/64, 2021-12-18 snapshot sdk
Run tested: none

Description:
Includes fixes for:

  • CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization cache
  • CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:

Signed-off-by: Jeffery To jeffery.to@gmail.com

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  golang/go#49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
@BKPepe BKPepe merged commit 7b2dd3e into openwrt:master Dec 29, 2021
@jefferyto jefferyto deleted the golang-1.17.5 branch December 30, 2021 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants