Sync from SUSE:SLFO:Main go1.24 revision cfd126c11f365151037e23cc7aa6d248

This commit is contained in:
2025-06-18 16:24:19 +02:00
parent 919cddf1d5
commit fd45632e7d
4 changed files with 21 additions and 4 deletions

BIN
go1.24.3.src.tar.gz (Stored with Git LFS)

Binary file not shown.

BIN
go1.24.4.src.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@@ -1,3 +1,20 @@
-------------------------------------------------------------------
Thu Jun 5 18:35:04 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- go1.24.4 (released 2025-06-05) includes security fixes to the
crypto/x509, net/http, and os packages, as well as bug fixes to
the linker, the go command, and the hash/maphash and os packages.
Refs boo#1236217 go1.24 release tracking
CVE-2025-22874 CVE-2025-0913 CVE-2025-4673
* go#73700 go#73702 boo#1244158 security: fix CVE-2025-22874 crypto/x509: ExtKeyUsageAny bypasses policy validation
* go#73720 go#73612 boo#1244157 security: fix CVE-2025-0913 os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
* go#73906 go#73816 boo#1244156 security: fix CVE-2025-4673 net/http: sensitive headers not cleared on cross-origin redirect
* go#73570 os: Root.Mkdir creates directories with zero permissions on OpenBSD
* go#73669 hash/maphash: hashing channels with purego impl. of maphash.Comparable panics
* go#73678 runtime/debug: BuildSetting does not document DefaultGODEBUG
* go#73809 cmd/go: add fips140 module selection mechanism
* go#73832 cmd/link: Go 1.24.3 and 1.23.9 regression - duplicated definition of symbol dlopen
-------------------------------------------------------------------
Tue May 6 18:13:03 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>

View File

@@ -122,7 +122,7 @@
%endif
Name: go1.24
Version: 1.24.3
Version: 1.24.4
Release: 0
Summary: A compiled, garbage-collected, concurrent programming language
License: BSD-3-Clause