Archana Polampalli a6d452646e go: fix CVE-2025-58187 ...

Due to the design of the name constraint checking algorithm, the processing
time of some inputs scals non-linearly with respect to the size of the certificate.
This affects programs which validate arbitrary certificate chains.

(From OE-Core rev: ce1626d1f1e232bc6da81e89088d0c0f5f3c52b4)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-11-14 06:45:29 -08:00

..

go

go: fix CVE-2025-58187

2025-11-14 06:45:29 -08:00

go_1.22.12.bb

go: upgrade 1.22.11 -> 1.22.12

2025-02-14 06:38:54 -08:00

go-1.22.12.inc

go: fix CVE-2025-58187

2025-11-14 06:45:29 -08:00

go-binary-native_1.22.12.bb

go-binary-native: ignore CVE-2025-0913

2025-09-01 08:30:56 -07:00

go-common.inc

go: set status of CVE-2024-3566

2025-06-25 08:35:09 -07:00

go-cross_1.22.12.bb

go: upgrade 1.22.11 -> 1.22.12

2025-02-14 06:38:54 -08:00

go-cross-canadian_1.22.12.bb

go: upgrade 1.22.11 -> 1.22.12

2025-02-14 06:38:54 -08:00

go-cross-canadian.inc

go: Drop linkmode with nativesdk/cross-canadian

2024-03-06 12:13:16 +00:00

go-cross.inc

go: Remove three unnecessary paths from do_compile[dirs]

2022-03-15 08:40:09 +00:00

go-crosssdk_1.22.12.bb

go: upgrade 1.22.11 -> 1.22.12

2025-02-14 06:38:54 -08:00

go-crosssdk.inc

gcc/go: Drop crosssdk suffix from virtual provides to improve dependency handling

2023-05-02 10:24:50 +01:00

go-runtime_1.22.12.bb

go: upgrade 1.22.11 -> 1.22.12

2025-02-14 06:38:54 -08:00

go-runtime.inc

go: Drop the linkmode completely

2024-05-23 08:55:01 -07:00

go-target.inc

go: Drop linkmode with nativesdk/cross-canadian

2024-03-06 12:13:16 +00:00