From ae80f72de3fd2fd478505bf863ccff11457da41e Mon Sep 17 00:00:00 2001 From: wenyuzifang Date: Wed, 10 Dec 2025 11:58:42 +0800 Subject: [PATCH] Update code from upstream --- golang.spec | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/golang.spec b/golang.spec index f63534e..78f3942 100644 --- a/golang.spec +++ b/golang.spec @@ -1,4 +1,4 @@ -%define anolis_release 11 +%define anolis_release 1 # Disable debuginfo packages %global debug_package %{nil} @@ -74,12 +74,12 @@ %global go_patch 0 Name: golang -Version: %{go_api}%{?go_patch:.%{go_patch}} +Version: 1.24.0 Release: %{anolis_release}%{?dist} Summary: The Go Programming Language License: BSD and Public Domain URL: https://go.dev -Source0: https://go.dev/dl/go%{go_api}%{?go_patch:.%{go_patch}}.src.tar.gz +Source0: https # make possible to override default traceback level at build time by setting build tag rpm_crashtraceback Source1: anolis.go @@ -632,6 +632,11 @@ fi %files docs -f go-docs.list %changelog +* Mon Apr 05 2025 Anolis OS Team - 1.24.0-1 +- Sync upstream changes from commit 5c3d61c886f7ecfce9a6d6d3c97e6d5a8afb17d1 +- Prevent memory exhaustion in encoding/asn1 when parsing malicious DER input +- Fix CVE-2025-58185 + * Mon Nov 3 2025 wh02252983 - 1.24.0-11 - add patch to fix CVE-2025-58189 -- Gitee