Archana Polampalli b3b8ae2317 go: fix CVE-2025-58189 ...

When Conn.Handshake fails during ALPN negotiation the error contains attacker
controlled information (the ALPN protocols sent by the client) which is not escaped.

(From OE-Core rev: e734cf62f24640d116c901dd97e09ddbb1f0cc4f)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-11-14 06:45:29 -08:00

..

apt

Revert "apt: runtime error: filename too long (tmpdir length)"

2024-07-23 06:05:47 -07:00

autoconf

…

autoconf-archive

…

automake

automake: mark new_rt_path_for_test-driver.patch as Inappropriate

2024-08-01 06:08:09 -07:00

binutils

binutils: patch CVE-2025-11413

2025-11-07 06:54:41 -08:00

bison

…

bootchart2

…

btrfs-tools

…

ccache

…

cdrtools

…

chrpath

…

cmake

cmake: fix CVE-2025-9301

2025-10-24 06:23:40 -07:00

createrepo-c

…

debugedit

…

dejagnu

dejagnu: Fix LICENSE

2024-09-19 05:11:35 -07:00

desktop-file-utils

pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI

2024-10-02 06:15:15 -07:00

devel-config

…

diffstat

…

distcc

…

dmidecode

…

dnf

dnf: drop python3-iniparse from DEPENDS and RDEPENDS

2024-12-13 05:21:54 -08:00

docbook-xml

…

dosfstools

…

dpkg

dpkg: patch CVE-2025-6297

2025-09-01 08:30:56 -07:00

dwarfsrcfiles

…

e2fsprogs

e2fsprogs: Fix build failure with gcc 15

2025-08-22 05:59:55 -07:00

elfutils

elfutils: Fix CVE-2025-1377

2025-11-03 07:17:01 -08:00

erofs-utils

…

expect

expect: fix native build with GCC 15

2025-10-09 12:16:46 -07:00

fdisk

…

file

…

flex

flex: fix build with gcc-15 on host

2025-11-03 07:17:01 -08:00

gcc

gcc: Upgrade to GCC 13.4

2025-06-20 08:38:12 -07:00

gdb

…

git

buildtools-tarball: fix unbound variable issues under 'set -u'

2025-09-22 13:17:52 -07:00

gnu-config

…

go

go: fix CVE-2025-58189

2025-11-14 06:45:29 -08:00

help2man

…

i2c-tools

…

icecc-create-env

…

icecc-toolchain

…

intltool

…

jquery

…

json-c

…

libcomps

…

libdnf

libdnf: upgrade 0.73.1 -> 0.73.2

2024-09-09 06:08:10 -07:00

libedit

libedit: Make docs generation deterministic

2024-09-19 05:11:35 -07:00

libmodulemd

…

librepo

…

libtool

nativesdk-libtool: sanitize the script, remove buildpaths

2025-03-26 08:48:51 -07:00

llvm

llvm: fix build with gcc-15

2025-09-30 08:01:59 -07:00

log4cplus

…

lua

…

m4

m4: Stick to C17 standard

2025-09-01 08:30:56 -07:00

make

…

makedevs

makedevs: Fix matching uid/gid

2024-10-18 06:04:41 -07:00

meson

meson: don't use deprecated pkgconfig variable

2024-07-17 05:36:14 -07:00

mmc

mmc-utils: fix URL

2024-07-26 07:43:46 -07:00

mtd

…

mtools

mtools: upgrade 4.0.48 -> 4.0.49

2025-07-29 07:59:53 -07:00

nasm

nasm: Upgrade 2.16.01 -> 2.16.03

2024-08-10 06:34:25 -07:00

ninja

ninja: fix build with python 3.13

2024-12-06 05:50:25 -08:00

opkg

…

opkg-utils

…

orc

orc: set CVE_PRODUCT

2025-07-29 07:59:52 -07:00

patch

…

patchelf

…

perl

perl: upgrade 5.38.2 -> 5.38.4

2025-05-02 08:20:12 -07:00

perl-cross

perlcross: 1.6 -> 1.6.2

2025-05-02 08:20:11 -07:00

pkgconf

pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH

2025-02-12 06:25:37 -08:00

pkgconfig

pkgconfig: fix build with gcc-15

2025-09-01 08:30:56 -07:00

pseudo

pseudo: Fix envp bug and add posix_spawn wrapper

2024-11-18 06:59:35 -08:00

python

python3: upgrade 3.12.11 -> 3.12.12

2025-10-24 06:23:40 -07:00

qemu

qemu: patch CVE-2024-8354

2025-10-24 06:23:39 -07:00

quilt

…

repo

…

rpm

rpm: keep leading `/' from sed operation

2025-09-09 09:08:09 -07:00

rsync

rsync: fix CVE-2024-12747

2025-01-25 06:20:37 -08:00

ruby

ruby-ptest : some ptest fixes

2025-09-01 08:30:57 -07:00

run-postinsts

…

rust

rust-llvm: fix build with gcc-15

2025-09-01 08:30:56 -07:00

squashfs-tools

…

strace

strace: download release tarballs from GitHub

2024-11-26 06:11:30 -08:00

subversion

subversion: ignore CVE-2024-45720

2025-02-21 06:25:05 -08:00

swig

…

syslinux

…

systemd-bootchart

…

tcf-agent

tcf-agent: correct the SRC_URI

2025-07-07 07:42:58 -07:00

tcltk

tcl: skip io-13.6 test case

2024-11-26 06:11:30 -08:00

unfs3

…

unifdef

unifdef: Don't use C23 constexpr keyword

2025-09-01 08:30:56 -07:00

vala

…

valgrind

…

xmlto

…