diff options
| author | Sharlatan Hellseher <sharlatanus@gmail.com> | 2026-07-17 09:39:39 +0100 |
|---|---|---|
| committer | Sharlatan Hellseher <sharlatanus@gmail.com> | 2026-07-23 21:15:03 +0100 |
| commit | 11b4a4ebd384aa015d5aaa102ac0e452fc7d13cc (patch) | |
| tree | 92a7e85c132e4fd66596fc9f6c4b23d40b85fe49 /gnu/packages/embedded.scm | |
| parent | bfed370071e0857b2ad31cc0641b2225a06ab488 (diff) | |
gnu: go-1.26: Update to 1.26.5 [security-fixes].
go1.26.5 (released 2026-07-07) includes security fixes to the crypto/tls
and os packages, as well as bug fixes to the compiler, the runtime, the
go command, and the net, os, and syscall packages.
See: <https://github.com/golang/go/milestone/439>,
<https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc>.
Contains fixes for:
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak
* gnu/packages/golang.scm (go-1.26): Update to 1.26.5.
[phases]{remove-testscript-mod_get_fips140_issue73649.txt}: New phase,
remove test script file requiring connection to Internet.
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Diffstat (limited to 'gnu/packages/embedded.scm')
0 files changed, 0 insertions, 0 deletions