Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a08f5149 by Salvatore Bonaccorso at 2023-06-13T22:41:09+02:00
Add Debian bug reference for CVE-2023-29401/golang-github-gin-gonic-gin
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9112,7 +9112,7 @@ CVE-2023-29402 (The go command may generate unexpected
code at build time when u
NOTE:
https://github.com/golang/go/commit/c0ed873cd8259f16d0da67eee783fda49f45ef61
(go1.20.5)
NOTE:
https://github.com/golang/go/commit/c160b49b6d328c86bd76ca2fff9009a71347333f
(go.1.19.10)
CVE-2023-29401 (The filename parameter of the Context.FileAttachment function
is not p ...)
- - golang-github-gin-gonic-gin <unfixed>
+ - golang-github-gin-gonic-gin <unfixed> (bug #1037530)
NOTE: https://github.com/gin-gonic/gin/issues/3555
NOTE:
https://github.com/gin-gonic/gin/commit/2d4bbec941551479b1fdf1e54ece03e6e82a7e72
(v1.9.1)
CVE-2023-29400 (Templates containing actions in unquoted HTML attributes (e.g.
"attr={ ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a08f5149875979b15633893f65a6c593dec8e06c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a08f5149875979b15633893f65a6c593dec8e06c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
