msft-golang: upgrade version 1.24.1 -> 1.24.5 (microsoft#14442)

Signed-off-by: Muhammad Falak R Wani <[email protected]>

Author: mfrw

SPECS/msft-golang/CVE-2025-22871.patch

@@ -1,9 +1,9 @@
 {
-    "Signatures": {
-        "go.20230802.5.src.tar.gz": "56b9e0e0c3c13ca95d5efa6de4e7d49a9d190eca77919beff99d33cd3fa74e95",
-        "go.20240206.2.src.tar.gz": "7982e0011aa9ab95fd0530404060410af4ba57326d26818690f334fdcb6451cd",
-        "go1.22.12-20250211.4.src.tar.gz": "e1cc3bff8fdf1f24843ffc9f0eaddfd344eb40fd9ca0d9ba2965165be519eeb7",
-        "go1.24.1-20250304.4.src.tar.gz": "d3bba6c5f7ff729121d2104c250fe96e5a6d7c6cb555d4ea038cfe69524417f6",
-        "go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52"
-    }
+ "Signatures": {
+  "go.20230802.5.src.tar.gz": "56b9e0e0c3c13ca95d5efa6de4e7d49a9d190eca77919beff99d33cd3fa74e95",
+  "go.20240206.2.src.tar.gz": "7982e0011aa9ab95fd0530404060410af4ba57326d26818690f334fdcb6451cd",
+  "go1.22.12-20250211.4.src.tar.gz": "e1cc3bff8fdf1f24843ffc9f0eaddfd344eb40fd9ca0d9ba2965165be519eeb7",
+  "go1.24.5-20250708.7.src.tar.gz": "c8dbbc78a39213d469cac915699a2581bd2d5d3f7f2f55394adedd365ecea46c",
+  "go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52"
+ }
 }

SPECS/msft-golang/CVE-2025-22874.patch

@@ -1,6 +1,6 @@
 %global goroot          %{_libdir}/golang
 %global gopath          %{_datadir}/gocode
-%global ms_go_filename  go1.24.1-20250304.4.src.tar.gz
+%global ms_go_filename  go1.24.5-20250708.7.src.tar.gz
 %global ms_go_revision  1
 %ifarch aarch64
 %global gohostarch      arm64
@@ -14,8 +14,8 @@
 %define __find_requires %{nil}
 Summary:        Go
 Name:           msft-golang
-Version:        1.24.1
-Release:        3%{?dist}
+Version:        1.24.5
+Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -31,9 +31,6 @@ Source3:        https://github.com/microsoft/go/releases/download/v1.20.14-1/go.
 # bootstrap 03
 Source4:        https://github.com/microsoft/go/releases/download/v1.22.12-2/go1.22.12-20250211.4.src.tar.gz
 Patch0:         go14_bootstrap_aarch64.patch
-Patch1:         CVE-2025-22871.patch
-Patch2:         CVE-2025-22874.patch
-Patch3:         CVE-2025-4673.patch
 Conflicts:      go
 Conflicts:      golang
 
@@ -56,9 +53,6 @@ tar xf %{SOURCE4} --no-same-owner
 mv -v go go-bootstrap-03
 
 %setup -q -n go
-patch -Np1 --ignore-whitespace < %{PATCH1}
-patch -Np1 --ignore-whitespace < %{PATCH2}
-patch -Np1 --ignore-whitespace < %{PATCH3}
 %build
 # go 1.4 bootstraps with C.
 # go 1.20 bootstraps with go >= 1.17.13
@@ -164,6 +158,10 @@ fi
 %{_bindir}/*
 
 %changelog
+* Wed Aug 06 2025 Muhammad Falak <[email protected]> - 1.24.5-1
+- Bump version to 1.24.5
+- Drop un-needed patches
+
 * Mon Jun 30 2025 Archana Shettigar <[email protected]> - 1.24.1-3
 - Patch CVE-2025-22874 & CVE-2025-4673
 

SPECS/msft-golang/CVE-2025-4673.patch

@@ -13663,8 +13663,8 @@
         "type": "other",
         "other": {
           "name": "msft-golang",
-          "version": "1.24.1",
-          "downloadUrl": "https://github.com/microsoft/go/releases/download/v1.24.1-1/go1.24.1-20250304.4.src.tar.gz"
+          "version": "1.24.5",
+          "downloadUrl": "https://github.com/microsoft/go/releases/download/v1.24.5-1/go1.24.5-20250708.7.src.tar.gz"
         }
       }
     },