Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:10677

Опубликовано: 03 окт. 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: golang security update

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
golangx86_641.el10_0golang-1.24.4-1.el10_0.x86_64.rpm
golang-binx86_641.el10_0golang-bin-1.24.4-1.el10_0.x86_64.rpm
golang-docsnoarch1.el10_0golang-docs-1.24.4-1.el10_0.noarch.rpm
golang-docsnoarch1.el10_0golang-docs-1.24.4-1.el10_0.noarch.rpm
golang-docsnoarch1.el10_0golang-docs-1.24.4-1.el10_0.noarch.rpm
golang-docsnoarch1.el10_0golang-docs-1.24.4-1.el10_0.noarch.rpm
golang-miscnoarch1.el10_0golang-misc-1.24.4-1.el10_0.noarch.rpm
golang-miscnoarch1.el10_0golang-misc-1.24.4-1.el10_0.noarch.rpm
golang-miscnoarch1.el10_0golang-misc-1.24.4-1.el10_0.noarch.rpm
golang-miscnoarch1.el10_0golang-misc-1.24.4-1.el10_0.noarch.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6.8
ubuntu
7 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
redhat
7 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
nvd
7 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS3: 6.8
msrc
6 месяцев назад

Sensitive headers not cleared on cross-origin redirect in net/http

CVSS3: 6.8
debian
7 месяцев назад

Proxy-Authorization and Proxy-Authenticate headers persisted on cross- ...