Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 84db489e by Salvatore Bonaccorso at 2025-05-06T21:36:05+02:00 Add CVE-2025-22873/go - - - - - dfdf6c60 by Salvatore Bonaccorso at 2025-05-06T21:36:05+02:00 Sort one previous golang issue top-down - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,11 @@ +CVE-2025-22873 + - golang-1.24 <unfixed> + - golang-1.23 <not-affected> (Vulnerable code only present in 1.24.x releases) + - golang-1.19 <not-affected> (Vulnerable code only present in 1.24.x releases) + - golang-1.15 <not-affected> (Vulnerable code only present in 1.24.x releases) + NOTE: https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ + NOTE: https://github.com/golang/go/issues/73555 + NOTE: https://github.com/golang/go/commit/8947f3395eb24dce6a5749517c0b40204b585f0a (go1.24.3) CVE-2025-4340 (A vulnerability classified as critical has been found in D-Link DIR-89 ...) NOT-FOR-US: D-Link CVE-2025-4337 (The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Re ...) @@ -10403,8 +10411,8 @@ CVE-2025-31115 (XZ Utils provide a general-purpose data-compression library plus NOTE: https://tukaani.org/xz/threaded-decoder-early-free.html NOTE: https://github.com/tukaani-project/xz/security/advisories/GHSA-6cc8-p5mm-29w2 CVE-2025-22871 (The net/http package improperly accepts a bare LF as a line terminator ...) - - golang-1.23 1.23.8-1 - golang-1.24 1.24.2-1 + - golang-1.23 1.23.8-1 - golang-1.19 <removed> [bookworm] - golang-1.19 <no-dsa> (Minor issue) - golang-1.15 <removed> View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f145bafbf22233d93f1f1348676f039f46897963...dfdf6c60040b5d12228a15f307493568a7838498 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/f145bafbf22233d93f1f1348676f039f46897963...dfdf6c60040b5d12228a15f307493568a7838498 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
