diff options
| author | Sharlatan Hellseher <sharlatanus@gmail.com> | 2026-03-01 15:01:46 +0000 |
|---|---|---|
| committer | Andreas Enge <andreas@enge.fr> | 2026-03-18 14:07:20 +0100 |
| commit | 36feabd05c10a6356fdcd6006013ff6b0df93910 (patch) | |
| tree | 6bbb86487489ea3d86116ccd6deac48af5fa778a /gnu | |
| parent | e777e50a9136894cbf66cb43ebdbbf30167403c4 (diff) | |
gnu: go-1.24: Update to 1.24.13 [security fixes].
go1.24.12 (released 2026-01-15) includes security fixes to the go
command, and the archive/zip, crypto/tls, and net/url packages, as well
as bug fixes to the compiler, the runtime, and the crypto/tls and os
packages.
See: <https://github.com/golang/go/milestone/419>
go1.24.13 (released 2026-02-04) includes security fixes to the go
command and the crypto/tls package, as well as bug fixes to the
crypto/x509 package.
See: <https://github.com/golang/go/milestone/421>
Containes fixes for:
CVE-2025-68121: Unexpected session resumption in crypto/tls
CVE-2025-68119: Unexpected code execution when invoking toolchain in
cmd/go
CVE-2025-61732: Potential code smuggling via doc comments in cmd/cgo
CVE-2025-61731: Arbitrary file write using cgo pkg-config directive in
cmd/go
CVE-2025-61730: Handshake messages may be processed at the incorrect
encryption level in crypto/tls
CVE-2025-61728: Excessive CPU consumption when building archive index in
archive/zip
CVE-2025-61726: Memory exhaustion in query parameter parsing in net/url
* gnu/packages/golang.scm (go-1.24): Update to 1.24.13.
Change-Id: I80dde282c7026fd7a3cf1161a6e63f0ceca2d51f
Diffstat (limited to 'gnu')
| -rw-r--r-- | gnu/packages/golang.scm | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm index 934aac57eff..6a718bc56e1 100644 --- a/gnu/packages/golang.scm +++ b/gnu/packages/golang.scm @@ -1076,7 +1076,7 @@ in the style of communicating sequential processes (@dfn{CSP}).") (package (inherit go-1.22) (name "go") - (version "1.24.11") + (version "1.24.13") (source (origin (method git-fetch) @@ -1085,7 +1085,7 @@ in the style of communicating sequential processes (@dfn{CSP}).") (commit (string-append "go" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1x41gipd0si307kazivsbmqx6kc96w76fsiglxlay7x8k1ig7rh4")))) + (base32 "1w4yip0cbfs845655j2kflsww4dkzm3cqhlg8jqxkl2gxia98sf6")))) (arguments (substitute-keyword-arguments (package-arguments go-1.22) ((#:phases phases) |