From 36feabd05c10a6356fdcd6006013ff6b0df93910 Mon Sep 17 00:00:00 2001
From: Sharlatan Hellseher <sharlatanus@gmail.com>
Date: Sun, 1 Mar 2026 15:01:46 +0000
Subject: [PATCH] gnu: go-1.24: Update to 1.24.13 [security fixes].

go1.24.12 (released 2026-01-15) includes security fixes to the go
command, and the archive/zip, crypto/tls, and net/url packages, as well
as bug fixes to the compiler, the runtime, and the crypto/tls and os
packages.
See: <https://github.com/golang/go/milestone/419>

go1.24.13 (released 2026-02-04) includes security fixes to the go
command and the crypto/tls package, as well as bug fixes to the
crypto/x509 package.
See: <https://github.com/golang/go/milestone/421>

Containes fixes for:
CVE-2025-68121: Unexpected session resumption in crypto/tls
CVE-2025-68119: Unexpected code execution when invoking toolchain in
                cmd/go
CVE-2025-61732: Potential code smuggling via doc comments in cmd/cgo
CVE-2025-61731: Arbitrary file write using cgo pkg-config directive in
                cmd/go
CVE-2025-61730: Handshake messages may be processed at the incorrect
                encryption level in crypto/tls
CVE-2025-61728: Excessive CPU consumption when building archive index in
                archive/zip
CVE-2025-61726: Memory exhaustion in query parameter parsing in net/url

* gnu/packages/golang.scm (go-1.24): Update to 1.24.13.

Change-Id: I80dde282c7026fd7a3cf1161a6e63f0ceca2d51f
---
 gnu/packages/golang.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm
index 934aac57ef..6a718bc56e 100644
--- a/gnu/packages/golang.scm
+++ b/gnu/packages/golang.scm
@@ -1076,7 +1076,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
   (package
     (inherit go-1.22)
     (name "go")
-    (version "1.24.11")
+    (version "1.24.13")
     (source
      (origin
        (method git-fetch)
@@ -1085,7 +1085,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
              (commit (string-append "go" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1x41gipd0si307kazivsbmqx6kc96w76fsiglxlay7x8k1ig7rh4"))))
+        (base32 "1w4yip0cbfs845655j2kflsww4dkzm3cqhlg8jqxkl2gxia98sf6"))))
     (arguments
      (substitute-keyword-arguments (package-arguments go-1.22)
        ((#:phases phases)