Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#19703 closed task (fixed)

Upgrade Go to 1.6.3

Reported by: dcf Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: TorBrowserTeam201607R
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

1.6.3 will be a security release. The prerelease announcement is here:
https://groups.google.com/forum/m/#!topic/golang-announce/7JTsd70ZAT0

#18333 was the upgrade to 1.6.2.

Child Tickets

Attachments (1)

0001-Bug-19703-Upgrade-go-to-1.6.3.patch (4.8 KB) - added by dcf 3 years ago.

Download all attachments as: .zip

Change History (5)

comment:1 Changed 3 years ago by dcf

BTW the security issue was the httpoxy one.
https://github.com/golang/go/issues/16405

Changed 3 years ago by dcf

comment:2 Changed 3 years ago by dcf

Keywords: TorBrowserTeam201607R added
Status: newneeds_review

Here is a patch. I tested it only on linux.

comment:3 Changed 3 years ago by gk

Resolution: fixed
Status: needs_reviewclosed

commit 1aa712a555e0ec9ff7a121f2d7429b4783bcf2ad on master and 645f3ea6c81aef0b8d1ef25ae2d9ebe30d7669a6 on hardened-builds have the changes. Provided all things go well we'll take that for the next stable, too.

comment:4 Changed 3 years ago by gk

We are leaving the stable branch on 1.4.x. I'll updated it to use Go 1.4.3 with commit 28f1d91a74404d83597c74de580d63652bec7f95.

Note: See TracTickets for help on using tickets.