guix_mirror_bot pushed a commit to branch go-team
in repository guix.
commit 751bbf15ae32520d96f9463de302b7b044b70753
Author: Sharlatan Hellseher <[email protected]>
AuthorDate: Fri Jul 17 09:39:39 2026 +0100
gnu: go-1.26: Update to 1.26.5 [security-fixes].
go1.26.5 (released 2026-07-07) includes security fixes to the crypto/tls
and os packages, as well as bug fixes to the compiler, the runtime, the
go command, and the net, os, and syscall packages.
See: <https://github.com/golang/go/milestone/439>,
<https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc>.
Contains fixes for:
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak
* gnu/packages/golang.scm (go-1.26): Update to 1.26.5.
Signed-off-by: Sharlatan Hellseher <[email protected]>
---
gnu/packages/golang.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm
index a27c1695c6..1607dd34d0 100644
--- a/gnu/packages/golang.scm
+++ b/gnu/packages/golang.scm
@@ -1132,7 +1132,7 @@ in the style of communicating sequential processes
(@dfn{CSP}).")
(package
(inherit go-1.24)
(name "go")
- (version "1.26.4")
+ (version "1.26.5")
(source
(origin
(method git-fetch)
@@ -1141,7 +1141,7 @@ in the style of communicating sequential processes
(@dfn{CSP}).")
(commit (string-append "go" version))))
(file-name (git-file-name name version))
(sha256
- (base32 "143qz6hikkh08gfm9md7r1na8mj404a27a4cidq3zkj6qc54jrm1"))))
+ (base32 "0kip7ak6ablgvpaf20mqy8an9g9y9nyslsf3hbk1z5gmy10789lg"))))
(arguments
(substitute-keyword-arguments arguments
((#:phases phases)
