Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f94ef33b by Salvatore Bonaccorso at 2025-03-23T06:46:39+01:00
Track fixed version for golang-github-golang-jwt-jwt issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -39,7 +39,7 @@ CVE-2025-30472 (Corosync through 3.1.9, if encryption is
disabled or the attacke
NOTE: https://github.com/corosync/corosync/issues/778
CVE-2025-30204 (golang-jwt is a Go implementation of JSON Web Tokens. Prior to
5.2.2 ...)
- golang-github-golang-jwt-jwt-v5 5.2.2-1
- - golang-github-golang-jwt-jwt <unfixed>
+ - golang-github-golang-jwt-jwt 5.0.0+really4.5.2-1
NOTE:
https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
NOTE: Fixed by:
https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3
(v5.2.2)
NOTE: Fixed by:
https://github.com/golang-jwt/jwt/commit/2f0e9add62078527821828c76865661aa7718a84
(v4.5.2)
@@ -42640,7 +42640,7 @@ CVE-2023-34444 (Combodo iTop is a simple, web based IT
Service Management tool.
CVE-2023-34443 (Combodo iTop is a simple, web based IT Service Management
tool. When d ...)
NOT-FOR-US: Combodo iTop
CVE-2024-51744 (golang-jwt is a Go implementation of JSON Web Tokens. Unclear
document ...)
- - golang-github-golang-jwt-jwt <unfixed> (bug #1086792)
+ - golang-github-golang-jwt-jwt 5.0.0+really4.5.2-1 (bug #1086792)
[bookworm] - golang-github-golang-jwt-jwt <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2323735
NOTE:
https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c
(v4.5.1)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f94ef33b732abf096852e831131230ec9dd74f31
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f94ef33b732abf096852e831131230ec9dd74f31
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
