Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1141-1

Опубликовано: 04 апр. 2025
Источник: suse-cvrf

Описание

Security update for go1.23

This update for go1.23 fixes the following issues:

  • Update to go1.23.8
  • CVE-2025-22871: Fix an issue with request smuggling through invalid chunked data. (bsc#1240550)

Список пакетов

Container bci/golang:1.23
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Enterprise Storage 7.1
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server 15 SP3-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server 15 SP4-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server 15 SP5-LTSS
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1
openSUSE Leap 15.6
go1.23-1.23.8-150000.1.27.1
go1.23-doc-1.23.8-150000.1.27.1
go1.23-race-1.23.8-150000.1.27.1

Ссылки

Описание

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Затронутые продукты
Container bci/golang:1.23:go1.23-1.23.8-150000.1.27.1
Container bci/golang:1.23:go1.23-doc-1.23.8-150000.1.27.1
Container bci/golang:1.23:go1.23-race-1.23.8-150000.1.27.1
SUSE Enterprise Storage 7.1:go1.23-1.23.8-150000.1.27.1
Ссылки
Уязвимость SUSE-SU-2025:1141-1