Vijay Anusuri 966777e0a4 go: Fix for CVE-2023-45288 ...

Upstream-Status: Backport from e55d7cf843

(From OE-Core rev: 9ad10bf355665ff799cefd40fb0d1938b0104b08)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-05-02 06:21:09 -07:00

..

0001-allow-CC-and-CXX-to-have-multiple-words.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0001-exec.go-do-not-write-linker-flags-into-buildids.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0001-net-http-httputil-avoid-query-parameter-smuggling.patch

go: fix CVE-2022-2880

2022-12-01 19:35:04 +00:00

0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0002-cmd-go-make-content-based-hash-generation-less-pedan.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0004-ld-add-soname-to-shareable-objects.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0005-make.bash-override-CC-when-building-dist-and-go_boot.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0006-cmd-dist-separate-host-and-target-builds.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0007-cmd-go-make-GOROOT-precious-by-default.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0008-use-GOBUILDMODE-to-set-buildmode.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

0009-Revert-cmd-go-make-sure-CC-and-CXX-are-absolute.patch

go: upgrade 1.17.7 -> 1.17.8

2022-03-09 11:46:27 +00:00

CVE-2022-2879.patch

go: fix CVE-2022-2879 and CVE-2022-41720

2023-04-11 11:31:52 +01:00

CVE-2022-27664.patch

go: fix CVE-2022-27664

2022-09-28 08:02:10 +01:00

CVE-2022-41715.patch

golang: CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps

2022-12-23 23:05:49 +00:00

CVE-2022-41717.patch

go: fix CVE-2022-41717 Excessive memory use in got server

2023-01-26 23:37:05 +00:00

CVE-2022-41720.patch

go: fix CVE-2022-2879 and CVE-2022-41720

2023-04-11 11:31:52 +01:00

CVE-2022-41722.patch

go-runtime: Security fix for CVE-2022-41722

2023-04-26 04:03:21 -10:00

CVE-2022-41723.patch

go-runtime: Security fix for CVE-2022-41723

2023-04-11 11:31:52 +01:00

CVE-2023-24534.patch

go: fix CVE-2023-24534 denial of service from excessive memory allocation

2023-05-10 04:19:56 -10:00

CVE-2023-24537.patch

go: fix CVE-2023-24537 Infinite loop in parsing

2023-04-26 04:03:21 -10:00

CVE-2023-24538_1.patch

go: Update fix for CVE-2023-24538 & CVE-2023-39318

2023-10-05 15:48:49 -10:00

CVE-2023-24538_2.patch

go: Update fix for CVE-2023-24538 & CVE-2023-39318

2023-10-05 15:48:49 -10:00

CVE-2023-24539.patch

go: fix CVE-2023-24539 html/template improper sanitization of CSS values

2023-06-14 04:16:59 -10:00

CVE-2023-29400.patch

go: fix CVE-2023-29400 html/template improper handling of empty HTML attributes

2023-07-12 05:11:37 -10:00

CVE-2023-29406-1.patch

go: add a complementary fix for CVE-2023-29406

2024-02-28 03:32:09 -10:00

CVE-2023-29406-2.patch

go: add a complementary fix for CVE-2023-29406

2024-02-28 03:32:09 -10:00

CVE-2023-45288.patch

go: Fix for CVE-2023-45288

2024-05-02 06:21:09 -07:00

CVE-2024-24784.patch

go: Backport fix CVE-2024-24784 & CVE-2024-24785

2024-03-13 07:36:50 -10:00

CVE-2024-24785.patch

go: Backport fix CVE-2024-24784 & CVE-2024-24785

2024-03-13 07:36:50 -10:00