From 174221b744358438fd108f19dfab81a2844be538 Mon Sep 17 00:00:00 2001 From: Nathan Zadoks Date: Thu, 14 Jan 2016 14:54:27 +0100 Subject: [PATCH] go: 1.5.2 -> 1.5.3 This addresses CVE-2015-8618 (a vulnerability in math/big) This issue can affect RSA computations in crypto/rsa, which is used by crypto/tls. TLS servers on 32-bit systems could plausibly leak their RSA private key due to this issue. Other protocol implementations that create many RSA signatures could also be impacted in the same way. https://groups.google.com/forum/#!topic/golang-dev/MEATuOi_ei4 --- pkgs/development/compilers/go/1.5.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/compilers/go/1.5.nix b/pkgs/development/compilers/go/1.5.nix index 32ae3ad0adc..54c8cf219d5 100644 --- a/pkgs/development/compilers/go/1.5.nix +++ b/pkgs/development/compilers/go/1.5.nix @@ -15,11 +15,11 @@ in stdenv.mkDerivation rec { name = "go-${version}"; - version = "1.5.2"; + version = "1.5.3"; src = fetchurl { url = "https://github.com/golang/go/archive/go${version}.tar.gz"; - sha256 = "1ggh5ll774an78yiij6xan67n38zglws0pxj36g0rcg84460h4m4"; + sha256 = "1n2niq0147pqflqh8j1s5wv8aq3vlh58ni3bp9add261z5q1g50k"; }; # perl is used for testing go vet