From 5cda43cf05e5b122925ee45d1effe928a5ae67f0 Mon Sep 17 00:00:00 2001 From: amitU Date: Thu, 28 May 2026 19:49:41 -0400 Subject: [PATCH 1/3] Removed the final bootstrap04 from the golang spec --- SPECS/golang/golang-1.23.spec | 4 ++++ SPECS/golang/golang-1.24.spec | 4 ++++ SPECS/golang/golang-1.25.spec | 4 ++++ SPECS/golang/golang.spec | 3 +++ 4 files changed, 15 insertions(+) diff --git a/SPECS/golang/golang-1.23.spec b/SPECS/golang/golang-1.23.spec index cc48eed4a70..fa276e95d38 100644 --- a/SPECS/golang/golang-1.23.spec +++ b/SPECS/golang/golang-1.23.spec @@ -99,6 +99,10 @@ rm -f %{gopath}/src/runtime/*.c ./make.bash --no-clean ) +# Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun + rm -rf %{_libdir}/golang + + %install mkdir -p %{buildroot}%{_bindir} diff --git a/SPECS/golang/golang-1.24.spec b/SPECS/golang/golang-1.24.spec index 88eb74c7430..a1360ff41f0 100644 --- a/SPECS/golang/golang-1.24.spec +++ b/SPECS/golang/golang-1.24.spec @@ -105,6 +105,10 @@ rm -f %{gopath}/src/runtime/*.c ./make.bash --no-clean ) +# Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun + rm -rf %{_libdir}/golang + + %install mkdir -p %{buildroot}%{_bindir} diff --git a/SPECS/golang/golang-1.25.spec b/SPECS/golang/golang-1.25.spec index 84265e79f9e..81591d1f2b0 100644 --- a/SPECS/golang/golang-1.25.spec +++ b/SPECS/golang/golang-1.25.spec @@ -105,6 +105,10 @@ rm -f %{gopath}/src/runtime/*.c ./make.bash --no-clean ) +# Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun + rm -rf %{_libdir}/golang + + %install mkdir -p %{buildroot}%{_bindir} diff --git a/SPECS/golang/golang.spec b/SPECS/golang/golang.spec index 233da5024dd..f0573bc0a8d 100644 --- a/SPECS/golang/golang.spec +++ b/SPECS/golang/golang.spec @@ -111,6 +111,9 @@ rm -f %{gopath}/src/runtime/*.c ./make.bash --no-clean ) +# Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun + rm -rf %{_libdir}/golang + %install mkdir -p %{buildroot}%{_bindir} From 2d15fab3a028a35c3b1bc6c553e8ece6420cae83 Mon Sep 17 00:00:00 2001 From: "amit.GitGud" Date: Fri, 29 May 2026 09:12:10 -0400 Subject: [PATCH 2/3] Updated the Release and added Changelog --- SPECS/golang/golang-1.23.spec | 5 ++++- SPECS/golang/golang-1.24.spec | 5 ++++- SPECS/golang/golang-1.25.spec | 5 ++++- SPECS/golang/golang.spec | 6 +++++- 4 files changed, 17 insertions(+), 4 deletions(-) diff --git a/SPECS/golang/golang-1.23.spec b/SPECS/golang/golang-1.23.spec index fa276e95d38..06db3794c7c 100644 --- a/SPECS/golang/golang-1.23.spec +++ b/SPECS/golang/golang-1.23.spec @@ -15,7 +15,7 @@ Summary: Go Name: golang Version: 1.23.12 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD-3-Clause Vendor: Microsoft Corporation Distribution: Azure Linux @@ -158,6 +158,9 @@ fi %{_bindir}/* %changelog +* Fri May 29 2026 Amit Upadhyay amitupadhyay@microsoft.com - 1.26.2-2 +- Remove the remaining bootstrap04 component to reduce attack surface; the residual bootstrap artifact has had prior vulnerability exposure, so removing it is a security improvement. + * Wed Aug 06 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.23.12-1 - Bump version to 1.23.12-1 diff --git a/SPECS/golang/golang-1.24.spec b/SPECS/golang/golang-1.24.spec index a1360ff41f0..579eff3123f 100644 --- a/SPECS/golang/golang-1.24.spec +++ b/SPECS/golang/golang-1.24.spec @@ -15,7 +15,7 @@ Summary: Go Name: golang Version: 1.24.13 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD-3-Clause Vendor: Microsoft Corporation Distribution: Azure Linux @@ -164,6 +164,9 @@ fi %{_bindir}/* %changelog +* Fri May 29 2026 Amit Upadhyay amitupadhyay@microsoft.com - 1.26.2-2 +- Remove the remaining bootstrap04 component to reduce attack surface; the residual bootstrap artifact has had prior vulnerability exposure, so removing it is a security improvement. + * Thu Feb 05 2026 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.13-1 - Bump version to 1.24.13-1 diff --git a/SPECS/golang/golang-1.25.spec b/SPECS/golang/golang-1.25.spec index 81591d1f2b0..102f2df2575 100644 --- a/SPECS/golang/golang-1.25.spec +++ b/SPECS/golang/golang-1.25.spec @@ -15,7 +15,7 @@ Summary: Go Name: golang Version: 1.25.9 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD-3-Clause Vendor: Microsoft Corporation Distribution: Azure Linux @@ -164,6 +164,9 @@ fi %{_bindir}/* %changelog +* Fri May 29 2026 Amit Upadhyay amitupadhyay@microsoft.com - 1.26.2-2 +- Remove the remaining bootstrap04 component to reduce attack surface; the residual bootstrap artifact has had prior vulnerability exposure, so removing it is a security improvement. + * Wed Apr 08 2026 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.25.9-1 - Bump version to 1.25.9-1 diff --git a/SPECS/golang/golang.spec b/SPECS/golang/golang.spec index f0573bc0a8d..88792b852b8 100644 --- a/SPECS/golang/golang.spec +++ b/SPECS/golang/golang.spec @@ -15,7 +15,7 @@ Summary: Go Name: golang Version: 1.26.2 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD-3-Clause Vendor: Microsoft Corporation Distribution: Azure Linux @@ -169,6 +169,10 @@ fi %{_bindir}/* %changelog + +* Fri May 29 2026 Amit Upadhyay amitupadhyay@microsoft.com - 1.26.2-2 +- Remove the remaining bootstrap04 component to reduce attack surface; the residual bootstrap artifact has had prior vulnerability exposure, so removing it is a security improvement. + * Wed Apr 08 2026 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.26.2-1 - Bump version to 1.26.2-1 From d7dc86746c8b8d72dae4925f2fa551b23d37e57f Mon Sep 17 00:00:00 2001 From: "amit.GitGud" Date: Fri, 29 May 2026 09:14:28 -0400 Subject: [PATCH 3/3] corrected spacing issue in the rm command --- SPECS/golang/golang-1.23.spec | 2 +- SPECS/golang/golang-1.24.spec | 2 +- SPECS/golang/golang-1.25.spec | 2 +- SPECS/golang/golang.spec | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/SPECS/golang/golang-1.23.spec b/SPECS/golang/golang-1.23.spec index 06db3794c7c..de0dda4d1e9 100644 --- a/SPECS/golang/golang-1.23.spec +++ b/SPECS/golang/golang-1.23.spec @@ -100,7 +100,7 @@ rm -f %{gopath}/src/runtime/*.c ) # Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun - rm -rf %{_libdir}/golang +rm -rf %{_libdir}/golang %install diff --git a/SPECS/golang/golang-1.24.spec b/SPECS/golang/golang-1.24.spec index 579eff3123f..217ba959f3a 100644 --- a/SPECS/golang/golang-1.24.spec +++ b/SPECS/golang/golang-1.24.spec @@ -106,7 +106,7 @@ rm -f %{gopath}/src/runtime/*.c ) # Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun - rm -rf %{_libdir}/golang +rm -rf %{_libdir}/golang %install diff --git a/SPECS/golang/golang-1.25.spec b/SPECS/golang/golang-1.25.spec index 102f2df2575..80f2e59d1a2 100644 --- a/SPECS/golang/golang-1.25.spec +++ b/SPECS/golang/golang-1.25.spec @@ -106,7 +106,7 @@ rm -f %{gopath}/src/runtime/*.c ) # Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun - rm -rf %{_libdir}/golang +rm -rf %{_libdir}/golang %install diff --git a/SPECS/golang/golang.spec b/SPECS/golang/golang.spec index 88792b852b8..5ba0491dc68 100644 --- a/SPECS/golang/golang.spec +++ b/SPECS/golang/golang.spec @@ -112,7 +112,7 @@ rm -f %{gopath}/src/runtime/*.c ) # Nuke the final bootstrapper 04. Note: It is not used in any step under install, post, postrun - rm -rf %{_libdir}/golang +rm -rf %{_libdir}/golang %install