import golang-1.22.11-1.module+el8+1010+deadbeef

.golang.checksum

-5a30e873b84f7ad27e2db99b3cb83c0883acee6a3cc4283437038c005316575d
+ee80ed2792f274dabc7f26ec5d86fc84cf2e365f059b3e33966c19144f4606c0

.golang.metadata

-aa7fdde0fd46e8033f9f91be1064f03036db98d9be5041011df8d149f7c7d966  SOURCES/go1.22.9-1-openssl-fips.tar.gz
-5b77fa05205714383f35491150e8cc9dc849ad73aef634f7b7ac4854e44ecde1  SOURCES/go1.22.9.tar.gz
+4c60db3acc441b82e2c63d043319896a8280c59a2c937b166212e3ab17fd6181  SOURCES/go1.22.11-1-openssl-fips.tar.gz
+3fbc7d7a671424ce0923c346d7ba363c12e33c2a4c3a410b90d2f58a8252f349  SOURCES/go1.22.11.tar.gz

SPECS/golang.spec

@@ -92,7 +92,7 @@
 %endif
 
 %global go_api 1.22
-%global version 1.22.9
+%global version 1.22.11
 %global pkg_release 1
 
 Name:           golang
@@ -258,6 +258,8 @@ popd
 %autopatch -p1
 
 sed -i '1s/$/ (%{?rhel:Red Hat} %{version}-%{release})/' VERSION
+# Delete the boring binary blob.  We use the system OpenSSL instead.
+rm -rf src/crypto/internal/boring/syso
 
 cp %{SOURCE2} ./src/runtime/
 
@@ -521,6 +523,15 @@ cd ..
 %endif
 
 %changelog
+* Tue Jan 21 2025 Archana <aravinda@redhat.com> - 1.22.11-1
+- Rebase to Go1.22.11 to pick up fixes for CVE 2024-45341 and 2024-45336
+- Fix test failures with expired certificates
+- Resolves: RHEL-73752
+
+* Fri Dec 13 2024 Alejandro Sáez <asm@redhat.com> - 1.22.9-2
+- Remove bundled boringcrypto blob
+- Resolves: RHEL-54338
+
 * Thu Nov 14 2024 David Benoit <dbenoit@redhat.com> - 1.22.9-1
 - Update to Go 1.22.9
 - Resolves: RHEL-67668