diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-10-17 19:14:02 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-10-27 11:37:43 +0000 |
| commit | 8de797828444a169003adb205b339b8964066e1f (patch) | |
| tree | 844b20e44a21af87e4319b1420e4ba68016aa33e /scripts/lib/wic/ksparser.py | |
| parent | 3b89dd24013e28b6372732d13d1cda6d57bfec51 (diff) | |
| download | poky-8de797828444a169003adb205b339b8964066e1f.tar.gz | |
go: upgrade 1.25.2 -> 1.25.3
Upgrade to latest 1.25.x release [1]:
$ git --no-pager log --oneline go1.25.2..go1.25.3
28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3
e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187
79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date
This release addresses breakage caused by a security patch included in Go 1.25.2
and 1.24.8, which enforced overly restrictive validation on the parsing of X.509
certificates. We've removed those restrictions while maintaining the security
fix that the initial release addressed [2].
[1] https://github.com/golang/go/compare/go1.25.2...go1.25.3
[2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik
(From OE-Core rev: d5f281bf13995117d98af809a2caea91e241713e)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/wic/ksparser.py')
0 files changed, 0 insertions, 0 deletions