Vijay Anusuri 690dcd2621 go: Fix CVE-2025-61727 ...

Upstream-Status: Backport from 04db77a423

(From OE-Core rev: dc1d95e3edfeaa5458fc564910ae5c9445a6f942)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2026-01-02 07:21:42 -08:00

..

0001-allow-CC-and-CXX-to-have-multiple-words.patch

…

0001-exec.go-do-not-write-linker-flags-into-buildids.patch

…

0001-net-http-httputil-avoid-query-parameter-smuggling.patch

go: fix CVE-2022-2880

2022-12-01 19:35:04 +00:00

0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch

…

0002-cmd-go-make-content-based-hash-generation-less-pedan.patch

…

0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch

…

0004-ld-add-soname-to-shareable-objects.patch

…

0005-make.bash-override-CC-when-building-dist-and-go_boot.patch

…

0006-cmd-dist-separate-host-and-target-builds.patch

…

0007-cmd-go-make-GOROOT-precious-by-default.patch

…

0008-use-GOBUILDMODE-to-set-buildmode.patch

…

0009-Revert-cmd-go-make-sure-CC-and-CXX-are-absolute.patch

…

CVE-2022-2879.patch

go: fix CVE-2022-2879 and CVE-2022-41720

2023-04-11 11:31:52 +01:00

CVE-2022-27664.patch

…

CVE-2022-41715.patch

golang: CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps

2022-12-23 23:05:49 +00:00

CVE-2022-41717.patch

go: fix CVE-2022-41717 Excessive memory use in got server

2023-01-26 23:37:05 +00:00

CVE-2022-41720.patch

go: fix CVE-2022-2879 and CVE-2022-41720

2023-04-11 11:31:52 +01:00

CVE-2022-41722.patch

go-runtime: Security fix for CVE-2022-41722

2023-04-26 04:03:21 -10:00

CVE-2022-41723.patch

go-runtime: Security fix for CVE-2022-41723

2023-04-11 11:31:52 +01:00

CVE-2023-24534.patch

go: fix CVE-2023-24534 denial of service from excessive memory allocation

2023-05-10 04:19:56 -10:00

CVE-2023-24537.patch

go: fix CVE-2023-24537 Infinite loop in parsing

2023-04-26 04:03:21 -10:00

CVE-2023-24538_1.patch

go: Update fix for CVE-2023-24538 & CVE-2023-39318

2023-10-05 15:48:49 -10:00

CVE-2023-24538_2.patch

go: Update fix for CVE-2023-24538 & CVE-2023-39318

2023-10-05 15:48:49 -10:00

CVE-2023-24539.patch

go: fix CVE-2023-24539 html/template improper sanitization of CSS values

2023-06-14 04:16:59 -10:00

CVE-2023-29400.patch

go: fix CVE-2023-29400 html/template improper handling of empty HTML attributes

2023-07-12 05:11:37 -10:00

CVE-2023-29406-1.patch

go: add a complementary fix for CVE-2023-29406

2024-02-28 03:32:09 -10:00

CVE-2023-29406-2.patch

go: add a complementary fix for CVE-2023-29406

2024-02-28 03:32:09 -10:00

CVE-2023-45288.patch

go: Fix for CVE-2023-45288

2024-05-02 06:21:09 -07:00

CVE-2024-24784.patch

go: Backport fix CVE-2024-24784 & CVE-2024-24785

2024-03-13 07:36:50 -10:00

CVE-2024-24785.patch

go: Backport fix CVE-2024-24784 & CVE-2024-24785

2024-03-13 07:36:50 -10:00

CVE-2025-58187-1.patch

go: Update CVE-2025-58187

2026-01-02 07:21:42 -08:00

CVE-2025-58187-2.patch

go: Update CVE-2025-58187

2026-01-02 07:21:42 -08:00

CVE-2025-58189.patch

go: fix CVE-2025-58189

2025-12-05 06:56:34 -08:00

CVE-2025-61723.patch

go: fix CVE-2025-61723

2025-12-05 06:56:34 -08:00

CVE-2025-61724.patch

go: fix CVE-2025-61724

2025-12-05 06:56:34 -08:00

CVE-2025-61727.patch

go: Fix CVE-2025-61727

2026-01-02 07:21:42 -08:00