Davanum Srinivas
8590fe063b
golang.org/x/net v0.59.0, crypto v0.57.0, sys v0.48.0, term v0.46.0, text v0.42.0, sync v0.23.0, tools v0.50.0, mod v0.41.0, time v0.16.0, oauth2 v0.37.0, exp 85c1c2202aba, and github.com/mdlayher/socket v0.7.0. x/mod v0.40.0 fixed CVE-2026-56865 and CVE-2026-56864 in sumdb; the package is not vendored but module scanners flag the requirement. The floors move together: x/net v0.59.0 requires the crypto, sys, term and text versions above, x/crypto v0.57.0 and mdlayher/socket v0.7.0 require x/net >= v0.58.0, and x/tools v0.50.0 requires x/mod v0.41.0.
socket 
Package socket provides a low-level network connection type which integrates
with Go's runtime network poller to provide asynchronous I/O and deadline
support. MIT Licensed.
This package focuses on UNIX-like operating systems which make use of BSD
sockets system call APIs. It is meant to be used as a foundation for the
creation of operating system-specific socket packages, for socket families such
as Linux's AF_NETLINK, AF_PACKET, or AF_VSOCK. This package should not be
used directly in end user applications.
Any use of package socket should be guarded by build tags, as one would also
use when importing the syscall or golang.org/x/sys packages.
Stability
See the CHANGELOG file for a description of changes between releases.
This package only supports the two most recent major versions of Go, mirroring Go's own release policy. Older versions of Go may lack critical features and bug fixes which are necessary for this package to function correctly.