Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bd929e22 by Sylvain Beucler at 2023-04-06T13:15:52+02:00
CVE-2023-24536: tidy version tag
- - - - -
472cc4fb by Sylvain Beucler at 2023-04-06T13:15:54+02:00
CVE-2023-24537/golang-1.*: reference introductory commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14470,6 +14470,7 @@ CVE-2023-24537 [go/parser: infinite loop in parsing]
NOTE: https://go.dev/issue/59180
NOTE:
https://github.com/golang/go/commit/e7c4b07ecf6b367f1afc9cc48cde963829dd0aab
(go1.20.3)
NOTE:
https://github.com/golang/go/commit/126a1d02da82f93ede7ce0bd8d3c51ef627f2104
(go1.19.8)
+ NOTE: Introduced by:
https://github.com/golang/go/commit/99c30211b1e0b3ac4e5d32f3ae5eaf759c23195f
(go1.11beta1)
CVE-2023-24536 [net/http, net/textproto, mime/multipart: denial of service
from excessive resource consumption]
RESERVED
- golang-1.20 1.20.3-1
@@ -14480,7 +14481,7 @@ CVE-2023-24536 [net/http, net/textproto,
mime/multipart: denial of service from
NOTE: https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
NOTE: https://go.dev/issue/59153
NOTE:
https://github.com/golang/go/commit/bf8c7c575c8a552d9d79deb29e80854dc88528d0
(go1.20.3)
- NOTE:
https://github.com/golang/go/commit/7917b5f31204528ea72e0629f0b7d52b35b27538
(go.1.19.8)
+ NOTE:
https://github.com/golang/go/commit/7917b5f31204528ea72e0629f0b7d52b35b27538
(go1.19.8)
CVE-2023-24535
RESERVED
CVE-2023-24534 [net/http, net/textproto: denial of service from excessive
memory allocation]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/836324fad8b929f878ebd230ae5ff881340b45f3...472cc4fb7d473bd7a9a339f697dcac81ae5d1f2e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/836324fad8b929f878ebd230ae5ff881340b45f3...472cc4fb7d473bd7a9a339f697dcac81ae5d1f2e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
