Adding patchinfo patchinfo.20250124123218114948.269002615871826

This commit is contained in:
Adrian Schröter 2025-01-27 10:45:49 +01:00
parent a76007a678
commit b996da0ae0
8 changed files with 61 additions and 4 deletions

6
.gitmodules vendored
View File

@ -8821,3 +8821,9 @@
[submodule "libHBAAPI2"]
path = libHBAAPI2
url = ../../SLFO-pool/libHBAAPI2
[submodule "go1.22-openssl"]
path = go1.22-openssl
url = ../../SLFO-pool/go1.22-openssl
[submodule "go1.23-openssl"]
path = go1.23-openssl
url = ../../SLFO-pool/go1.23-openssl

@ -1 +1 @@
Subproject commit d6515252b084e37301de8f6db785e003dedd1513ff3a2f1ce190ba3a3135811a
Subproject commit dc8db3e77bb5dad466028900d5d0820eac8a50b4e94a0437da979dda52f0ccb8

2
go1.22

@ -1 +1 @@
Subproject commit 065dcf49383d7ea5ab88a5431addfea89763d22fe5828da4eb6715a3b90a63d5
Subproject commit 3bd77cf474f658d60e2425538e0d1f4b62f79e0ffc98781a5abf818192a71b66

1
go1.22-openssl Submodule

@ -0,0 +1 @@
Subproject commit fed6c705dc436b7090cf5b0edd26e550e4507bb5f93fe5c950c005b3aef6b1f5

2
go1.23

@ -1 +1 @@
Subproject commit 06bdb0a80caf1351562c825f50d3ea48a5aa93e0f819df319e9ea7d914fcf1a8
Subproject commit edb04f86895cdb7384e7db4c60015f90dd92d502e81f5a483c817f1a81e1ce74

1
go1.23-openssl Submodule

@ -0,0 +1 @@
Subproject commit a82cedbd42fb8b2a5ad4cc53863dab87d0e266840e3255b1f6154418bae4baa0

@ -1 +1 @@
Subproject commit 420e2387eb7af383341986d8512939db53c8b95f2b03c471de7970d30de389a2
Subproject commit 0087bb558391b496900cbe2d26934816eeba49403b9cf88f72355c71aa27fb4d

View File

@ -0,0 +1,49 @@
<patchinfo>
<!-- generated from request(s) 359002 -->
<issue tracker="bnc" id="1218424">go1.22 release tracking</issue>
<issue tracker="bnc" id="1236045">VUL-0: CVE-2024-45341: go1.22,go1.23: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints</issue>
<issue tracker="bnc" id="1236046">VUL-0: CVE-2024-45336: go1.22,go1.23: net/http: sensitive headers incorrectly sent after cross-domain redirect</issue>
<issue tracker="cve" id="2024-45336"/>
<issue tracker="cve" id="2024-45341"/>
<packager>jfkw</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for go1.22</summary>
<description>This update for go1.22 fixes the following issues:
- go1.22.11 (released 2025-01-16) includes security fixes to the
crypto/x509 and net/http packages, as well as bug fixes to the
runtime.
Refs bsc#1218424 go1.22 release tracking
CVE-2024-45341 CVE-2024-45336
* go#71207 go#71156 bsc#1236045 security: fix CVE-2024-45341 crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints
* go#71210 go#70530 bsc#1236046 security: fix CVE-2024-45336 net/http: sensitive headers incorrectly sent after cross-domain redirect
* go#71103 crypto/tls: TestVerifyConnection/TLSv12 failures
* go#71146 internal/trace: TestTraceCPUProfile/Stress failures
- Enable loongarch64 builds
- go1.22.10 (released 2024-12-03) includes fixes to the runtime and
the syscall package.
Refs bsc#1218424 go1.22 release tracking
* go#70201 syscall: SyscallN always escapes the variadic argument
* go#70238 time: TestLoadFixed failures
* go#70474 sync/atomic: TestNilDeref flaky failure on windows-386 with runtime fatal error
- go1.22.9 (released 2024-11-06) includes fixes to the linker.
Refs bsc#1218424 go1.22 release tracking
* go#69745 runtime: TestGdbAutotmpTypes failures
* go#69991 cmd/link: LC_UUID not generated by go linker, resulting in failure to access local network on macOS 15
* go#70124 cmd/cgo/internal/testcarchive: TestManyCalls failures
- go1.22.8 (released 2024-10-01) includes fixes to cgo, and the
maps and syscall packages.
Refs bsc#1218424 go1.22 release tracking
* go#69155 maps: segmentation violation in maps.Clone
* go#69218 cmd/cgo: alignment issue with int128 inside of a struct
* go#69366 syscall: TestAmbientCapsUserns fails on Ubuntu 24.04/Linux 6.8.0
</description>
<package>go1.22</package>
<seperate_build_arch/>
</patchinfo>