poky/meta/recipes-devtools/go at 7506cbff40f07ae937758a5fbf872ce751e8c3ba - poky

mirror of https://git.yoctoproject.org/poky synced 2026-05-09 17:39:31 +00:00

Files

T

Soumya Sambu 7506cbff40 go: Fix CVE-2024-24789

The archive/zip package's handling of certain types of invalid zip files
differs from the behavior of most zip implementations. This misalignment
could be exploited to create an zip file with contents that vary depending
on the implementation reading the file. The archive/zip package now rejects
files containing these errors.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-24789

Upstream-patch:
https://github.com/golang/go/commit/c8e40338cf00f3c1d86c8fb23863ad67a4c72bcc

(From OE-Core rev: f198fdc392c6e3b99431383ab6577749e83f1cb3)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-08-08 09:03:45 -07:00

go-1.18

go: Fix for CVE-2023-45288

2024-05-02 06:21:09 -07:00

go-1.19

go: Fix CVE-2023-29409

2023-08-30 04:46:35 -10:00

go-1.20

go: Fix CVE-2023-45285 and CVE-2023-45287

2024-02-15 03:51:56 -10:00

go-1.21

go: Fix CVE-2024-24789