diff --git a/.gitignore b/.gitignore index 198960f..4183edf 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ SOURCES/compiler-rt-18.1.8.src.tar.xz -SOURCES/go1.23.9-1-openssl-fips.tar.gz -SOURCES/go1.23.9.tar.gz +SOURCES/go1.24.4-1-openssl-fips.tar.gz +SOURCES/go1.24.4.tar.gz diff --git a/.golang.metadata b/.golang.metadata index f299811..ba56d77 100644 --- a/.golang.metadata +++ b/.golang.metadata @@ -1,3 +1,3 @@ 6ecbfa5516b60adb4e4e60f991b0d8ddf5aab12a SOURCES/compiler-rt-18.1.8.src.tar.xz -f88e1a017f8abb82764e1340b858268b8beca1d8 SOURCES/go1.23.9-1-openssl-fips.tar.gz -ac7c4463e6f0e61fceb6c4e73d7c7d9da61d6a5d SOURCES/go1.23.9.tar.gz +17f42100ea9dfb490f9e01ceb202ed77de85af58 SOURCES/go1.24.4-1-openssl-fips.tar.gz +c47e32e36f3bc042dde60d44908c0c78039a69a4 SOURCES/go1.24.4.tar.gz diff --git a/SOURCES/fedora.go b/SOURCES/fedora.go index 81b28ba..3ff4d3e 100644 --- a/SOURCES/fedora.go +++ b/SOURCES/fedora.go @@ -1,5 +1,9 @@ +//go:build rpm_crashtraceback // +build rpm_crashtraceback +// Copyright 2017 The Fedora Project Contributors. All rights reserved. +// Use of this source code is governed by the MIT license. + package runtime func init() { diff --git a/SPECS/golang.spec b/SPECS/golang.spec index 4eab7d7..73dd062 100644 --- a/SPECS/golang.spec +++ b/SPECS/golang.spec @@ -92,8 +92,8 @@ %global gohostarch s390x %endif -%global go_api 1.23 -%global go_version 1.23.9 +%global go_api 1.24 +%global go_version 1.24.4 %global version %{go_version} %global pkg_release 1 @@ -287,7 +287,9 @@ cat /proc/cpuinfo cat /proc/meminfo # Build race detector .syso's from llvm sources -%global tsan_buildflags %(echo %{build_cflags} | sed 's/-mtls-dialect=gnu2//') +# The race detector requests a -fno-exceptions build. +%global tsan_buildflags %(rpm -D 'toolchain clang' -E '%{optflags}' | sed 's/-fexceptions//') +%global tsan_optflag -O1 mkdir ../llvm tar -xf %{SOURCE3} -C ../llvm @@ -301,18 +303,18 @@ export GOARCH=$(go env GOARCH) %ifarch x86_64 pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v3 ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v3 ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v3/race_linux.syso pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v1 ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v1 ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v1/race_linux.syso %else pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_%{gohostarch}.syso ./src/runtime/race/race_linux_%{gohostarch}.syso %endif @@ -502,9 +504,9 @@ export GOLANG_FIPS=1 export OPENSSL_FORCE_FIPS_MODE=1 pushd crypto # Run all crypto tests but skip TLS, we will run FIPS specific TLS tests later - go test -timeout 50m $(go list ./... | grep -v tls) -v + go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP" # Check that signature functions have parity between boring and notboring - CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v + CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP" popd # Run all FIPS specific TLS tests pushd crypto/tls @@ -583,6 +585,20 @@ cd .. %endif %changelog +* Fri Jun 13 2025 David Benoit - 1.24.4-1 +- Update to Go 1.24.4 (fips-1) +- Resolves: RHEL-101074 + +* Thu Jun 12 2025 Archana - 1.23.10-1 +- Update to Go 1.23.10 +- Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874 +- Resolves: RHEL-96000 + +* Fri May 30 2025 Alejandro Sáez - 1.23.9-1 +- Update to Go 1.23.9 +- Remove runtime-usleep-s390x.patch, already merged +- Resolves: RHEL-93212 + * Fri May 30 2025 Alejandro Sáez - 1.23.9-1 - Update to Go 1.23.9 - Remove runtime-usleep-s390x.patch, already merged