diff --git a/.gitmodules b/.gitmodules index 53293a4..55b88a6 100644 --- a/.gitmodules +++ b/.gitmodules @@ -8821,3 +8821,9 @@ [submodule "libHBAAPI2"] path = libHBAAPI2 url = ../../SLFO-pool/libHBAAPI2 +[submodule "go1.22-openssl"] + path = go1.22-openssl + url = ../../SLFO-pool/go1.22-openssl +[submodule "go1.23-openssl"] + path = go1.23-openssl + url = ../../SLFO-pool/go1.23-openssl diff --git a/go1.21-openssl b/go1.21-openssl index d651525..dc8db3e 160000 --- a/go1.21-openssl +++ b/go1.21-openssl @@ -1 +1 @@ -Subproject commit d6515252b084e37301de8f6db785e003dedd1513ff3a2f1ce190ba3a3135811a +Subproject commit dc8db3e77bb5dad466028900d5d0820eac8a50b4e94a0437da979dda52f0ccb8 diff --git a/go1.22 b/go1.22 index 065dcf4..3bd77cf 160000 --- a/go1.22 +++ b/go1.22 @@ -1 +1 @@ -Subproject commit 065dcf49383d7ea5ab88a5431addfea89763d22fe5828da4eb6715a3b90a63d5 +Subproject commit 3bd77cf474f658d60e2425538e0d1f4b62f79e0ffc98781a5abf818192a71b66 diff --git a/go1.22-openssl b/go1.22-openssl new file mode 160000 index 0000000..fed6c70 --- /dev/null +++ b/go1.22-openssl @@ -0,0 +1 @@ +Subproject commit fed6c705dc436b7090cf5b0edd26e550e4507bb5f93fe5c950c005b3aef6b1f5 diff --git a/go1.23 b/go1.23 index 06bdb0a..edb04f8 160000 --- a/go1.23 +++ b/go1.23 @@ -1 +1 @@ -Subproject commit 06bdb0a80caf1351562c825f50d3ea48a5aa93e0f819df319e9ea7d914fcf1a8 +Subproject commit edb04f86895cdb7384e7db4c60015f90dd92d502e81f5a483c817f1a81e1ce74 diff --git a/go1.23-openssl b/go1.23-openssl new file mode 160000 index 0000000..a82cedb --- /dev/null +++ b/go1.23-openssl @@ -0,0 +1 @@ +Subproject commit a82cedbd42fb8b2a5ad4cc53863dab87d0e266840e3255b1f6154418bae4baa0 diff --git a/govulncheck-vulndb b/govulncheck-vulndb index 420e238..0087bb5 160000 --- a/govulncheck-vulndb +++ b/govulncheck-vulndb @@ -1 +1 @@ -Subproject commit 420e2387eb7af383341986d8512939db53c8b95f2b03c471de7970d30de389a2 +Subproject commit 0087bb558391b496900cbe2d26934816eeba49403b9cf88f72355c71aa27fb4d diff --git a/patchinfo.20250124123218114948.269002615871826/_patchinfo b/patchinfo.20250124123218114948.269002615871826/_patchinfo new file mode 100644 index 0000000..abdaae4 --- /dev/null +++ b/patchinfo.20250124123218114948.269002615871826/_patchinfo @@ -0,0 +1,49 @@ + + + go1.22 release tracking + VUL-0: CVE-2024-45341: go1.22,go1.23: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints + VUL-0: CVE-2024-45336: go1.22,go1.23: net/http: sensitive headers incorrectly sent after cross-domain redirect + + + jfkw + moderate + security + Security update for go1.22 + This update for go1.22 fixes the following issues: + +- go1.22.11 (released 2025-01-16) includes security fixes to the + crypto/x509 and net/http packages, as well as bug fixes to the + runtime. + Refs bsc#1218424 go1.22 release tracking + CVE-2024-45341 CVE-2024-45336 + * go#71207 go#71156 bsc#1236045 security: fix CVE-2024-45341 crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints + * go#71210 go#70530 bsc#1236046 security: fix CVE-2024-45336 net/http: sensitive headers incorrectly sent after cross-domain redirect + * go#71103 crypto/tls: TestVerifyConnection/TLSv12 failures + * go#71146 internal/trace: TestTraceCPUProfile/Stress failures + +- Enable loongarch64 builds + +- go1.22.10 (released 2024-12-03) includes fixes to the runtime and + the syscall package. + Refs bsc#1218424 go1.22 release tracking + * go#70201 syscall: SyscallN always escapes the variadic argument + * go#70238 time: TestLoadFixed failures + * go#70474 sync/atomic: TestNilDeref flaky failure on windows-386 with runtime fatal error + +- go1.22.9 (released 2024-11-06) includes fixes to the linker. + Refs bsc#1218424 go1.22 release tracking + * go#69745 runtime: TestGdbAutotmpTypes failures + * go#69991 cmd/link: LC_UUID not generated by go linker, resulting in failure to access local network on macOS 15 + * go#70124 cmd/cgo/internal/testcarchive: TestManyCalls failures + +- go1.22.8 (released 2024-10-01) includes fixes to cgo, and the + maps and syscall packages. + Refs bsc#1218424 go1.22 release tracking + * go#69155 maps: segmentation violation in maps.Clone + * go#69218 cmd/cgo: alignment issue with int128 inside of a struct + * go#69366 syscall: TestAmbientCapsUserns fails on Ubuntu 24.04/Linux 6.8.0 + + + go1.22 + +