Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go1.23.6 #114

Merged
merged 3 commits into from
Feb 11, 2025
Merged

Update go1.23.6 #114

merged 3 commits into from
Feb 11, 2025

Conversation

awly
Copy link

@awly awly commented Feb 11, 2025

Pull in https://pkg.go.dev/vuln/GO-2025-3447 to placate govulncheck. It's not smart enough to filter vulns by GOARCH.

rolandshoemaker and others added 3 commits January 31, 2025 09:38
…ond constant time on ppc64le

Remove the branching instruction from p256NegCond which made it variable
time. The technique used matches that used in p256MovCond.

Fixes golang#71383
Fixes golang#71423
Fixes CVE-2025-22866

Change-Id: Ibc2a46814d856cbbdaf6cc0c5a415ed5d42ca793
Reviewed-on: https://go-review.googlesource.com/c/go/+/643735
Reviewed-by: David Chase <drchase@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Paul Murphy <murp@ibm.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
(cherry picked from commit 6fc23a3)
Reviewed-on: https://go-review.googlesource.com/c/go/+/645515
Reviewed-by: Carlos Amedee <carlos@golang.org>
Change-Id: Iec54508cfd791299630ae4b784667cd2643c4c15
Reviewed-on: https://go-review.googlesource.com/c/go/+/646221
Reviewed-by: Carlos Amedee <carlos@golang.org>
Reviewed-by: Cherry Mui <cherryyz@google.com>
Auto-Submit: Gopher Robot <gobot@golang.org>
TryBot-Bypass: Cherry Mui <cherryyz@google.com>
@awly awly requested a review from bradfitz February 11, 2025 00:45
@awly awly merged commit 65c3f5f into tailscale.go1.23 Feb 11, 2025
5 checks passed
@awly awly deleted the update-go1.23.6 branch February 11, 2025 02:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants