From 273f207302490bda0ab500530cbb12b7a5ead9e5 Mon Sep 17 00:00:00 2001 From: Tatiana Bradley Date: Fri, 5 Aug 2022 15:56:13 -0400 Subject: [PATCH] _content/doc/devel, internal/history: call out "security" in relevant release notes The security team found a few release notes that did not contain the word security but included one or more security fixes. This CL updates the relevant release notes. Change-Id: I7cf4aeef65e5328a936c951781cd4f0bd54429d7 Reviewed-on: https://go-review.googlesource.com/c/website/+/421426 Reviewed-by: Dmitri Shuralyov Reviewed-by: Julie Qiu Run-TryBot: Tatiana Bradley TryBot-Result: Gopher Robot Reviewed-by: Dmitri Shuralyov --- _content/doc/devel/release.html | 6 +- cmd/golangorg/testdata/release.txt | 159 +++++++++++++++++++++++++++-- internal/history/release.go | 21 +++- 3 files changed, 173 insertions(+), 13 deletions(-) diff --git a/_content/doc/devel/release.html b/_content/doc/devel/release.html index 147a2333..f514a230 100644 --- a/_content/doc/devel/release.html +++ b/_content/doc/devel/release.html @@ -281,7 +281,7 @@ See the Go 1

-go1.4.2 (released 2015-02-17) includes bug fixes to the go command, the compiler and linker, and the runtime, syscall, reflect, and math/big packages. +go1.4.2 (released 2015-02-17) includes security fixes to the compiler, and bug fixes to the go command, the compiler and linker, and the runtime, syscall, reflect, and math/big packages. See the Go 1.4.2 milestone on our issue tracker for details.

@@ -305,7 +305,7 @@ See the change history

-go1.3.2 (released 2014-09-25) includes bug fixes to cgo and the crypto/tls packages. +go1.3.2 (released 2014-09-25) includes security fixes to the crypto/tls package and bug fixes to cgo. See the change history for details.

@@ -344,7 +344,7 @@ Read the Go 1.1 Release Notes for more information.

Minor revisions

-go1.1.1 (released 2013-06-13) includes several compiler and runtime bug fixes. +go1.1.1 (released 2013-06-13) includes a security fix to the compiler and several bug fixes to the compiler and runtime. See the change history for details.

diff --git a/cmd/golangorg/testdata/release.txt b/cmd/golangorg/testdata/release.txt index 01535f72..8cb2492a 100644 --- a/cmd/golangorg/testdata/release.txt +++ b/cmd/golangorg/testdata/release.txt @@ -1,6 +1,77 @@ GET https://go.dev/doc/devel/release header content-type == text/html; charset=utf-8 trimbody contains +

go1.19 (released 2022-08-02)

+

+ Go 1.19 is a major release of Go. + Read the Go 1.19 Release Notes for more information. +

+

go1.18 (released 2022-03-15)

+

+ Go 1.18 is a major release of Go. + Read the Go 1.18 Release Notes for more information. +

+

Minor revisions

+

+ go1.18.1 + (released 2022-04-12) + includes + security + fixes to the crypto/elliptic, crypto/x509, and encoding/pem packages, as well as + bug + fixes to the compiler, linker, runtime, the go command, vet, and the bytes, crypto/x509, and go/types packages. + See the + Go 1.18.1 milestone + on our issue tracker for details. +

+

+ go1.18.2 + (released 2022-05-10) + includes + security + fixes to the syscall package, as well as + bug + fixes to the compiler, runtime, the go command, and the crypto/x509, go/types, net/http/httptest, reflect, and sync/atomic packages. + See the + Go 1.18.2 milestone + on our issue tracker for details. +

+

+ go1.18.3 + (released 2022-06-01) + includes + security + fixes to the crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well as + bug + fixes to the compiler, and the crypto/tls and text/template/parse packages. + See the + Go 1.18.3 milestone + on our issue tracker for details. +

+

+ go1.18.4 + (released 2022-07-12) + includes + security + fixes to the compress/gzip, encoding/gob, encoding/xml, go/parser, io/fs, net/http, and path/filepath packages, as well as + bug + fixes to the compiler, the go command, the linker, the runtime, and the runtime/metrics package. + See the + Go 1.18.4 milestone + on our issue tracker for details. +

+

+ go1.18.5 + (released 2022-08-01) + includes + security + fixes to the encoding/gob and math/big packages, as well as + bug + fixes to the compiler, the go command, the runtime, and the testing package. + See the + Go 1.18.5 milestone + on our issue tracker for details. +

go1.17 (released 2021-08-16)

Go 1.17 is a major release of Go. @@ -97,7 +168,66 @@ trimbody contains Go 1.17.8 milestone on our issue tracker for details.

-trimbody contains +

+ go1.17.9 + (released 2022-04-12) + includes + security + fixes to the crypto/elliptic and encoding/pem packages, as well as + bug + fixes to the linker and runtime. + See the + Go 1.17.9 milestone + on our issue tracker for details. +

+

+ go1.17.10 + (released 2022-05-10) + includes + security + fixes to the syscall package, as well as + bug + fixes to the compiler, runtime, and the crypto/x509 and net/http/httptest packages. + See the + Go 1.17.10 milestone + on our issue tracker for details. +

+

+ go1.17.11 + (released 2022-06-01) + includes + security + fixes to the crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well as + bug + fixes to the crypto/tls package. + See the + Go 1.17.11 milestone + on our issue tracker for details. +

+

+ go1.17.12 + (released 2022-07-12) + includes + security + fixes to the compress/gzip, encoding/gob, encoding/xml, go/parser, io/fs, net/http, and path/filepath packages, as well as + bug + fixes to the compiler, the go command, the runtime, and the runtime/metrics package. + See the + Go 1.17.12 milestone + on our issue tracker for details. +

+

+ go1.17.13 + (released 2022-08-01) + includes + security + fixes to the encoding/gob and math/big packages, as well as + bug + fixes to the compiler and the runtime. + See the + Go 1.17.13 milestone + on our issue tracker for details. +

go1.16 (released 2021-02-16)

Go 1.16 is a major release of Go. @@ -748,7 +878,10 @@ trimbody contains go1.12.2 (released 2019-04-05) includes - fixes to the compiler, the go command, the runtime, and the doc, net, net/http/httputil, and os packages. + security + fixes to the runtime, as well as + bug + fixes to the compiler, the go command, and the doc, net, net/http/httputil, and os packages. See the Go 1.12.2 milestone on our issue tracker for details. @@ -987,7 +1120,10 @@ trimbody contains go1.11.10 (released 2019-05-06) includes - fixes to the runtime and the linker. + security + fixes to the runtime, as well as + bug + fixes to the linker. See the Go 1.11.10 milestone on our issue tracker for details. @@ -1031,6 +1167,9 @@ trimbody contains go1.10.1 (released 2018-03-28) includes + security + fixes to the go command, as well as + bug fixes to the compiler, runtime, and the archive/zip, crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages. See the Go 1.10.1 milestone @@ -1138,7 +1277,10 @@ trimbody contains go1.9.3 (released 2018-01-22) includes - fixes to the compiler, runtime, and the database/sql, math/big, net/http, and net/url packages. + security + fixes to the net/url package, as well as + bug + fixes to the compiler, runtime, and the database/sql, math/big, and net/http packages. See the Go 1.9.3 milestone on our issue tracker for details. @@ -1158,6 +1300,9 @@ trimbody contains go1.9.5 (released 2018-03-28) includes + security + fixes to the go command, as well as + bug fixes to the compiler, go command, and the net/http/pprof package. See the Go 1.9.5 milestone @@ -1354,7 +1499,7 @@ trimbody contains See the Go 1.4.1 milestone on our issue tracker for details.

- go1.4.2 (released 2015-02-17) includes bug fixes to the go command, the compiler and linker, and the runtime, syscall, reflect, and math/big packages. + go1.4.2 (released 2015-02-17) includes security fixes to the compiler, and bug fixes to the go command, the compiler and linker, and the runtime, syscall, reflect, and math/big packages. See the Go 1.4.2 milestone on our issue tracker for details.

@@ -1372,7 +1517,7 @@ trimbody contains See the change history for details.

- go1.3.2 (released 2014-09-25) includes bug fixes to cgo and the crypto/tls packages. + go1.3.2 (released 2014-09-25) includes security fixes to the crypto/tls package and bug fixes to cgo. See the change history for details.

@@ -1401,7 +1546,7 @@ trimbody contains

Minor revisions

- go1.1.1 (released 2013-06-13) includes several compiler and runtime bug fixes. + go1.1.1 (released 2013-06-13) includes a security fix to the compiler and several bug fixes to the compiler and runtime. See the change history for details.

diff --git a/internal/history/release.go b/internal/history/release.go index 2da07b67..07d3a363 100644 --- a/internal/history/release.go +++ b/internal/history/release.go @@ -692,7 +692,10 @@ Only macOS users who hit this issue need to update.`, { Date: Date{2019, 5, 6}, Version: Version{1, 11, 10}, Bug: &FixSummary{ - Components: []template.HTML{"the runtime", "the linker"}, + Components: []template.HTML{"the linker"}, + }, + Security: &FixSummary{ + Components: []template.HTML{"the runtime"}, }, }, { @@ -726,9 +729,12 @@ number. The intended fix is in go1.11.9.`, { Date: Date{2019, 4, 5}, Version: Version{1, 12, 2}, Bug: &FixSummary{ - Components: []template.HTML{"the compiler", "the go command", "the runtime"}, + Components: []template.HTML{"the compiler", "the go command"}, Packages: []string{"doc", "net", "net/http/httputil", "os"}, }, + Security: &FixSummary{ + Components: []template.HTML{"the runtime"}, + }, }, { Date: Date{2019, 4, 5}, Version: Version{1, 11, 7}, @@ -864,6 +870,9 @@ minimal support to the go command for the vgo transition.`, Components: []template.HTML{"the compiler", "runtime"}, Packages: []string{"archive/zip", "crypto/tls", "crypto/x509", "encoding/json", "net", "net/http", "net/http/pprof"}, }, + Security: &FixSummary{ + Components: []template.HTML{"the go command"}, + }, }, { Date: Date{2018, 3, 28}, Version: Version{1, 9, 5}, @@ -871,6 +880,9 @@ minimal support to the go command for the vgo transition.`, Components: []template.HTML{"the compiler", "go command"}, Packages: []string{"net/http/pprof"}, }, + Security: &FixSummary{ + Components: []template.HTML{"the go command"}, + }, }, { Date: Date{2018, 2, 16}, Version: Version{1, 10, 0}, @@ -883,7 +895,10 @@ minimal support to the go command for the vgo transition.`, Date: Date{2018, 1, 22}, Version: Version{1, 9, 3}, Bug: &FixSummary{ Components: []template.HTML{"the compiler", "runtime"}, - Packages: []string{"database/sql", "math/big", "net/http", "net/url"}, + Packages: []string{"database/sql", "math/big", "net/http"}, + }, + Security: &FixSummary{ + Packages: []string{"net/url"}, }, }, {