go: 1.5.2 -> 1.5.3

This addresses CVE-2015-8618 (a vulnerability in math/big)
This issue can affect RSA computations in crypto/rsa, which is used by
crypto/tls. TLS servers on 32-bit systems could plausibly leak their RSA
private key due to this issue. Other protocol implementations that
create many RSA signatures could also be impacted in the same way.
https://groups.google.com/forum/#!topic/golang-dev/MEATuOi_ei4
This commit is contained in:
Nathan Zadoks 2016-01-14 14:54:27 +01:00
parent 622eb5f699
commit 174221b744

View File

@ -15,11 +15,11 @@ in
stdenv.mkDerivation rec {
name = "go-${version}";
version = "1.5.2";
version = "1.5.3";
src = fetchurl {
url = "https://github.com/golang/go/archive/go${version}.tar.gz";
sha256 = "1ggh5ll774an78yiij6xan67n38zglws0pxj36g0rcg84460h4m4";
sha256 = "1n2niq0147pqflqh8j1s5wv8aq3vlh58ni3bp9add261z5q1g50k";
};
# perl is used for testing go vet