39a0de9a45
Includes a security fix for crypto/elliptic (CVE-2023-24532).
> go1.19.7 (released 2023-03-07) includes a security fix to the crypto/elliptic
> package, as well as bug fixes to the linker, the runtime, and the crypto/x509
> and syscall packages. See the Go 1.19.7 milestone on our issue tracker for
> details.
https://go.dev/doc/devel/release#go1.19.minor
From the announcement:
> We have just released Go versions 1.20.2 and 1.19.7, minor point releases.
>
> These minor releases include 1 security fixes following the security policy:
>
> - crypto/elliptic: incorrect P-256 ScalarMult and ScalarBaseMult results
>
> The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an
> incorrect result if called with some specific unreduced scalars (a scalar larger
> than the order of the curve).
>
> This does not impact usages of crypto/ecdsa or crypto/ecdh.
>
> This is CVE-2023-24532 and Go issue https://go.dev/issue/58647.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 23da1cec6c)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
67 lines
1.2 KiB
HCL
67 lines
1.2 KiB
HCL
variable "GO_VERSION" {
|
|
default = "1.19.7"
|
|
}
|
|
variable "VERSION" {
|
|
default = ""
|
|
}
|
|
|
|
variable "USE_GLIBC" {
|
|
default = ""
|
|
}
|
|
|
|
variable "STRIP_TARGET" {
|
|
default = ""
|
|
}
|
|
|
|
group "default" {
|
|
targets = ["binary"]
|
|
}
|
|
|
|
target "binary" {
|
|
target = "binary"
|
|
platforms = ["local"]
|
|
output = ["build"]
|
|
args = {
|
|
BASE_VARIANT = USE_GLIBC != "" ? "buster" : "alpine"
|
|
VERSION = VERSION
|
|
GO_STRIP = STRIP_TARGET
|
|
}
|
|
}
|
|
|
|
target "dynbinary" {
|
|
inherits = ["binary"]
|
|
args = {
|
|
GO_LINKMODE = "dynamic"
|
|
}
|
|
}
|
|
|
|
variable "GROUP_TOTAL" {
|
|
default = "1"
|
|
}
|
|
|
|
variable "GROUP_INDEX" {
|
|
default = "0"
|
|
}
|
|
|
|
function "platforms" {
|
|
params = []
|
|
result = ["linux/amd64", "linux/386", "linux/arm64", "linux/arm", "linux/ppc64le", "linux/s390x", "darwin/amd64", "darwin/arm64", "windows/amd64"]
|
|
}
|
|
|
|
function "glen" {
|
|
params = [platforms, GROUP_TOTAL]
|
|
result = ceil(length(platforms)/GROUP_TOTAL)
|
|
}
|
|
|
|
target "_all_platforms" {
|
|
platforms = slice(platforms(), GROUP_INDEX*glen(platforms(), GROUP_TOTAL),min(length(platforms()), (GROUP_INDEX+1)*glen(platforms(), GROUP_TOTAL)))
|
|
}
|
|
|
|
target "cross" {
|
|
inherits = ["binary", "_all_platforms"]
|
|
}
|
|
|
|
target "dynbinary-cross" {
|
|
inherits = ["dynbinary", "_all_platforms"]
|
|
}
|