AST-2018-009 (CVE-2018-17281): Remote crash in HTTP websocket upgrade

the provides is setup correctly later on based on cross compile
variables

Stripping go binaries used to be an issue but nowadays it should work as
expected.

> We don't intentionally do anything that would make stripping a binary
> not OK, and strip has worked for the past five years or so.

https://groups.google.com/forum/?_escaped_fragment_=topic/golang-dev/ABppMOjYP6w#!topic/golang-dev/ABppMOjYP6w

Oliver Smith authored 6 years ago and Timo Teräs committed 6 years ago

This makes it possible to provide armv7 as additional architecture in
Alpine, next to armhf. See the discussion in this ML thread:
<https://lists.alpinelinux.org/alpine-devel/6271.html>

It's done by adding armv7 next to armhf in the arch line and also
!armv7 where the arch line said !armhf. The following script was used:

go-tools was removed in 11c5f257. It is
unclear to me why gogs depended on go-tools in the first place. The
build passes without go-tools so I guess it's fine to remove it.

Does not seem to be needed and hopefully it fixes a deadlock on aarch64

paul morgan authored 6 years ago and Andy Postnikov committed 6 years ago

Changes from 1.10.4 include:

- Fixed an accidental null pointer free on systems where getaddrinfo() is unsuccessful