]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
projects / thirdparty / openembedded / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cea9fcf) | patch
go: fix CVE-2025-58189
authorArchana Polampalli <archana.polampalli@windriver.com>
Fri, 28 Nov 2025 16:07:57 +0000 (21:37 +0530)
committerSteve Sakoman <steve@sakoman.com>
Mon, 1 Dec 2025 15:13:56 +0000 (07:13 -0800)
commitb3f055df67cf345c9a17c5c1c874c778d538ba9e
tree0aa792e8e672ba4eacf5ea315b7b9a099db6d9adtree | snapshot
parentcea9fcf1b21b1b35b88986b676d712ab8ffa9d67commit | diff
go: fix CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled
information (the ALPN protocols sent by the client) which is not escaped.

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/go/go-1.17.13.inc diff | blob | blame | history
meta/recipes-devtools/go/go-1.18/CVE-2025-58189.patch [new file with mode: 0644] blob
Mirror of git://git.openembedded.org/openembedded-core