## Filing issues

Sensitive security-related issues should be reported to [******@****.***](mailto:******@****.***).
See the [security policy](https://golang.org/security) for details.

The recommended way to file an issue is by running `go bug`.
Otherwise, when filing an issue, make sure to answer these five questions:

Go 1.22 added a new [`crypto/x509.Certificate`](/pkg/crypto/x509/#Certificate)
field, [`Policies`](/pkg/crypto/x509/#Certificate.Policies), which supports
certificate policy OIDs with components larger than 31 bits. By default this
field is only used during parsing, when it is populated with policy OIDs, but
not used during marshaling. It can be used to marshal these larger OIDs, instead
of the existing PolicyIdentifiers field, by using the

# Security Policy

## Supported Versions

We support the past two Go releases (for example, Go 1.17.x and Go 1.18.x when Go 1.18.x is the latest stable release).

See https://go.dev/wiki/Go-Release-Cycle and in particular the
[Release Maintenance](https://go.dev/wiki/Go-Release-Cycle#release-maintenance)
part of that page.

## Reporting a Vulnerability

pkg syscall (darwin-arm64), const IPV6_HLIMDEC = 1
pkg syscall (darwin-arm64), const IPV6_HLIMDEC ideal-int
pkg syscall (darwin-arm64), const IPV6_IPSEC_POLICY = 28
pkg syscall (darwin-arm64), const IPV6_IPSEC_POLICY ideal-int
pkg syscall (darwin-arm64), const IPV6_JOIN_GROUP = 12
pkg syscall (darwin-arm64), const IPV6_LEAVE_GROUP = 13
pkg syscall (darwin-arm64), const IPV6_MAXHLIM = 255

  - type: input
    id: go-version
    attributes:
      label: Go version
      description: |
        What version of Go are you using (`go version`)?

        Note: we only [support](https://go.dev/doc/devel/release#policy) the two most recent major releases.
      placeholder: ex. go version go1.20.7 darwin/arm64
    validations:
      required: true

  - type: textarea
    id: go-env
    attributes:

pkg syscall (windows-386), const CERT_CHAIN_POLICY_AUTHENTICODE = 2
pkg syscall (windows-386), const CERT_CHAIN_POLICY_AUTHENTICODE_TS = 3
pkg syscall (windows-386), const CERT_CHAIN_POLICY_BASE = 1
pkg syscall (windows-386), const CERT_CHAIN_POLICY_BASIC_CONSTRAINTS = 5
pkg syscall (windows-386), const CERT_CHAIN_POLICY_EV = 8
pkg syscall (windows-386), const CERT_CHAIN_POLICY_MICROSOFT_ROOT = 7

pkg syscall (freebsd-arm64), const IP_HDRINCL = 2
pkg syscall (freebsd-arm64), const IP_HDRINCL ideal-int
pkg syscall (freebsd-arm64), const IP_IPSEC_POLICY = 21
pkg syscall (freebsd-arm64), const IP_IPSEC_POLICY ideal-int
pkg syscall (freebsd-arm64), const IP_MAX_GROUP_SRC_FILTER = 512
pkg syscall (freebsd-arm64), const IP_MAX_GROUP_SRC_FILTER ideal-int

pkg syscall (freebsd-riscv64), const IPV6_HOPOPTS = 49 #53466
pkg syscall (freebsd-riscv64), const IPV6_HOPOPTS ideal-int #53466
pkg syscall (freebsd-riscv64), const IPV6_IPSEC_POLICY = 28 #53466
pkg syscall (freebsd-riscv64), const IPV6_IPSEC_POLICY ideal-int #53466
pkg syscall (freebsd-riscv64), const IPV6_JOIN_GROUP = 12 #53466
pkg syscall (freebsd-riscv64), const IPV6_LEAVE_GROUP = 13 #53466