From 992e3dabaa0a57a9f85ce6be7fa8025c2aa57271 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= <adrian@suse.de>
Date: Fri, 7 Feb 2025 16:17:39 +0100
Subject: [PATCH] Adding patchinfo
 patchinfo.20250206145604607184.90520734224245

---
 .../_patchinfo                                | 39 +++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 patchinfo.20250206145604607184.90520734224245/_patchinfo

diff --git a/patchinfo.20250206145604607184.90520734224245/_patchinfo b/patchinfo.20250206145604607184.90520734224245/_patchinfo
new file mode 100644
index 0000000..5214b96
--- /dev/null
+++ b/patchinfo.20250206145604607184.90520734224245/_patchinfo
@@ -0,0 +1,39 @@
+<patchinfo>
+  <!-- generated from request(s) 360185 -->
+  <issue tracker="bnc" id="1229122">go1.23 release tracking</issue>
+  <issue tracker="bnc" id="1236045">VUL-0: CVE-2024-45341: go1.22,go1.23: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints</issue>
+  <issue tracker="bnc" id="1236046">VUL-0: CVE-2024-45336: go1.22,go1.23: net/http: sensitive headers incorrectly sent after cross-domain redirect</issue>
+  <issue tracker="bnc" id="1236801">VUL-0: CVE-2025-22866 go1.22,go1.23,go1.24: crypto/elliptic: timing sidechannel for P-256 on ppc64le</issue>
+  <issue tracker="cve" id="2024-45336"/>
+  <issue tracker="cve" id="2024-45341"/>
+  <issue tracker="cve" id="2025-22866"/>
+  <packager>jfkw</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for go1.23</summary>
+  <description>This update for go1.23 fixes the following issues:
+
+- go1.23.6 (released 2025-02-04) includes security fixes to the
+  crypto/elliptic package, as well as bug fixes to the compiler and
+  the go command. (bsc#1229122)
+ 
+  * CVE-2025-22866: crypto/internal/fips140/nistec: p256NegCond is variable time on ppc64le (bsc#1236801)
+  * cmd/go/internal/modfetch/codehost: test fails with git 2.47.1
+  * cmd/compile: broken write barrier
+
+- go1.23.5 (released 2025-01-16) includes security fixes to the
+  crypto/x509 and net/http packages, as well as bug fixes to the
+  compiler, the runtime, and the net package.
+  (bsc#1229122)
+
+  * CVE-2024-45341: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints (bsc#1236045)
+  * CVE-2024-45336: net/http: sensitive headers incorrectly sent after cross-domain redirect (bsc#1236046)
+  * runtime: severe performance drop for cgo calls in go1.22.5
+  * cmd/compile/internal/importer: flip enable alias to true
+  * os: io.Copy(net.Conn, os.Stdin) on MacOS terminate immediately without waiting for input
+  * crypto/tls: TestVerifyConnection/TLSv12 failures
+  * internal/trace: TestTraceCPUProfile/Stress failures
+</description>
+  <package>go1.23</package>
+  <seperate_build_arch/>
+</patchinfo>