ALT-PU-2025-5056: package golang update to version 1.23.8-alt1
Описание
This update upgrades golang to version 1.23.8-alt1.
Устраненные уязвимости2
Ссылки4
GHSA-5423-jcjm-2gpv
https://github.com/advisories/GHSA-5423-jcjm-2gpvGHSA-6jqf-mv7m-3q7p
https://github.com/advisories/GHSA-6jqf-mv7m-3q7pGHSA-g9pc-8g42-g6vq
https://github.com/advisories/GHSA-g9pc-8g42-g6vqСвязанные уязвимости
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
Request smuggling due to acceptance of invalid chunked data in net/http
The net/http package improperly accepts a bare LF as a line terminator ...