guix_mirror_bot pushed a commit to branch go-team
in repository guix.
commit f954843945c87ae5e35052d61dd4b9f2ce4792bc
Author: Sharlatan Hellseher <[email protected]>
AuthorDate: Fri Jul 17 09:45:29 2026 +0100
gnu: go-1.25: Update to 1.25.12 [security-fixes].
go1.25.12 (released 2026-07-07) includes security fixes to the
crypto/tls and os packages, as well as bug fixes to the compiler, the go
command, and the net and os packages.
See: <https://github.com/golang/go/milestone/438>,
<https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc>.
Contains fixes for:
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak
* gnu/packages/golang.scm (go-1.25): Update to 1.25.12.
---
gnu/packages/golang.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm
index 1607dd34d0..93c8ab8c09 100644
--- a/gnu/packages/golang.scm
+++ b/gnu/packages/golang.scm
@@ -1087,7 +1087,7 @@ in the style of communicating sequential processes
(@dfn{CSP}).")
(package
(inherit go-1.24)
(name "go")
- (version "1.25.11")
+ (version "1.25.12")
(source
(origin
(method git-fetch)
@@ -1096,7 +1096,7 @@ in the style of communicating sequential processes
(@dfn{CSP}).")
(commit (string-append "go" version))))
(file-name (git-file-name name version))
(sha256
- (base32 "0l9z57fzjca7z038yxkkxc42f18hcnznbfd3cq4ipng9cp5l2zfc"))))
+ (base32 "13191v8vixwf9a1yrn7hz828xfgdgm5dxx4vp0h4s0bzl4rzjn32"))))
(arguments
(substitute-keyword-arguments (package-arguments go-1.24)
((#:phases phases)
