From 7556bb66c24572d13df7c9b9e460d7aafbb7b119 Mon Sep 17 00:00:00 2001 From: Debarshi Ray Date: Wed, 22 Feb 2023 20:29:43 +0100 Subject: [PATCH] Bump the golang requirement to ensure recent CVE fixes 'BuildRequires: golang >= 1.19.4' will ensure that recent CVEs like CVE-2022-41717 remain fixed. There's no need to do a build just for this, because the toolbox package has either already been built with a sufficiently recent golang or will soon be. https://bugzilla.redhat.com/show_bug.cgi?id=2161274 --- toolbox.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolbox.spec b/toolbox.spec index a0b7d4c..bdc8c3d 100644 --- a/toolbox.spec +++ b/toolbox.spec @@ -30,7 +30,7 @@ Patch103: toolbox-cmd-root-Work-around-Cobra-1.1.2-s-handling-of-usage.patc BuildRequires: gcc BuildRequires: go-md2man -BuildRequires: golang >= 1.13 +BuildRequires: golang >= 1.19.4 %if ! 0%{?rhel} BuildRequires: golang(github.com/HarryMichal/go-version) BuildRequires: golang(github.com/acobaugh/osrelease)