Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:10676

Опубликовано: 04 окт. 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: golang security update

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
golangx86_641.el9_6golang-1.24.4-1.el9_6.x86_64.rpm
golang-binx86_641.el9_6golang-bin-1.24.4-1.el9_6.x86_64.rpm
golang-docsnoarch1.el9_6golang-docs-1.24.4-1.el9_6.noarch.rpm
golang-docsnoarch1.el9_6golang-docs-1.24.4-1.el9_6.noarch.rpm
golang-docsnoarch1.el9_6golang-docs-1.24.4-1.el9_6.noarch.rpm
golang-docsnoarch1.el9_6golang-docs-1.24.4-1.el9_6.noarch.rpm
golang-miscnoarch1.el9_6golang-misc-1.24.4-1.el9_6.noarch.rpm
golang-miscnoarch1.el9_6golang-misc-1.24.4-1.el9_6.noarch.rpm
golang-miscnoarch1.el9_6golang-misc-1.24.4-1.el9_6.noarch.rpm
golang-miscnoarch1.el9_6golang-misc-1.24.4-1.el9_6.noarch.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6.8
ubuntu
8 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
redhat
8 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
nvd
8 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
msrc
7 месяцев назад

Sensitive headers not cleared on cross-origin redirect in net/http

CVSS3: 6.8
debian
8 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross- ...