update: golang.org/x/net

[dongsupark]

Name: golang.org/x/net
CVEs: CVE-2024-45338
CVSSs: n/a
Action Needed: update to >= 0.33.0

Summary: x/net/html: non-linear parsing of case-insensitive content. Version v0.33.0 of golang.org/x/net fixes a vulnerability in the golang.org/x/net/html package which could cause a denial of service. An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

See also https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA.

Unfortunately for some reason dependabot is not able to automatically create an update PR for affected repos.

refmap.gentoo: TBD