poky/meta/recipes-devtools/go
Archana Polampalli e085cf0d53 go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
 being unexpectedly returned.

(From OE-Core rev: ed6df1883225ec08e637a0d7a15a6a5da4665d8d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
..
go go: fix CVE-2025-47906 2025-10-13 12:42:58 -07:00
go_1.22.12.bb go: upgrade 1.22.11 -> 1.22.12 2025-02-14 06:38:54 -08:00
go-1.22.12.inc go: fix CVE-2025-47906 2025-10-13 12:42:58 -07:00
go-binary-native_1.22.12.bb go-binary-native: ignore CVE-2025-0913 2025-09-01 08:30:56 -07:00
go-common.inc go: set status of CVE-2024-3566 2025-06-25 08:35:09 -07:00
go-cross_1.22.12.bb go: upgrade 1.22.11 -> 1.22.12 2025-02-14 06:38:54 -08:00
go-cross-canadian_1.22.12.bb go: upgrade 1.22.11 -> 1.22.12 2025-02-14 06:38:54 -08:00
go-cross-canadian.inc go: Drop linkmode with nativesdk/cross-canadian 2024-03-06 12:13:16 +00:00
go-cross.inc go: Remove three unnecessary paths from do_compile[dirs] 2022-03-15 08:40:09 +00:00
go-crosssdk_1.22.12.bb go: upgrade 1.22.11 -> 1.22.12 2025-02-14 06:38:54 -08:00
go-crosssdk.inc gcc/go: Drop crosssdk suffix from virtual provides to improve dependency handling 2023-05-02 10:24:50 +01:00
go-runtime_1.22.12.bb go: upgrade 1.22.11 -> 1.22.12 2025-02-14 06:38:54 -08:00
go-runtime.inc go: Drop the linkmode completely 2024-05-23 08:55:01 -07:00
go-target.inc go: Drop linkmode with nativesdk/cross-canadian 2024-03-06 12:13:16 +00:00