Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f50a0991 by Salvatore Bonaccorso at 2025-01-28T21:49:07+01:00
Add golang-1.24 for CVE-2024-45336
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3454,6 +3454,7 @@ CVE-2024-45341 (A certificate with a URI which has a IPv6
address with a zone ID
NOTE: Fixed by:
https://github.com/golang/go/commit/19d21034157ba69d0f54318a9867d9b08730efcb
(go1.22.11)
NOTE: Certificates containing URIs are not permitted in the web PKI, so
this only affects users of private PKIs which make use of URIs
CVE-2024-45336 (The HTTP client drops sensitive headers after following a
cross-domain ...)
+ - golang-1.24 1.24~rc2-1
- golang-1.23 1.23.5-1
- golang-1.22 1.22.11-1
- golang-1.19 <removed>
@@ -3462,6 +3463,7 @@ CVE-2024-45336 (The HTTP client drops sensitive headers
after following a cross-
[bullseye] - golang-1.15 <postponed> (Minor issue)
NOTE: https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI
NOTE: https://go.dev/issue/70530
+ NOTE: Fixed by:
https://github.com/golang/go/commit/6b605505047416bbbf513bba1540220a8897f3f6
(go1.24rc2)
NOTE: Fixed by:
https://github.com/golang/go/commit/bb8230f80535945648e8b56739ad450cf433eba9
(go1.23.5)
NOTE: Fixed by:
https://github.com/golang/go/commit/b72d56f98d6620ebe07626dca4bb67ea8e185379
(go1.22.11)
CVE-2025-23783 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f50a09916c2c564f50afcbc4697f52b1f4fc34ea
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f50a09916c2c564f50afcbc4697f52b1f4fc34ea
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
