| Summary: | golang new security issue CVE-2024-24788 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Nicolas Salguero <nicolas.salguero> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, bruno.cornec, fri, herman.viaene, joequant, sysadmin-bugs |
| Version: | 9 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA9-64-OK | ||
| Source RPM: | golang-1.21.9-1.mga9.src.rpm | CVE: | CVE-2024-24788 |
| Status comment: | |||
|
Description
Nicolas Salguero
2024-05-13 14:00:11 CEST
Nicolas Salguero
2024-05-13 14:01:04 CEST
Status comment:
(none) =>
Fixed upstream in 1.21.10 CC registered maintainer though seem not much active here, so also CC Bruno C who have done most updates recently plus assign all. Assignee:
bugsquad =>
pkg-bugs CVE-2024-24787 only affects macOS. Suggested advisory: ======================== The updated packages fix a security vulnerability: A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. (CVE-2024-24788) References: https://www.openwall.com/lists/oss-security/2024/05/08/3 ======================== Updated packages in core/updates_testing: ======================== golang-1.21.10-1.mga9 golang-bin-1.21.10-1.mga9 golang-docs-1.21.10-1.mga9 golang-misc-1.21.10-1.mga9 golang-shared-1.21.10-1.mga9 golang-src-1.21.10-1.mga9 golang-tests-1.21.10-1.mga9 from SRPM: golang-1.21.10-1.mga9.src.rpm Summary:
golang new security issues CVE-2024-2478[78] =>
golang new security issue CVE-2024-24788
katnatek
2024-05-15 04:04:33 CEST
Keywords:
(none) =>
advisory MGA9-64 Plasma Wayland on HP-Pavillion No installation issues.Checked previous updates , but testing wih docker is out of my league. At least no ill effects. CC:
(none) =>
herman.viaene Get docker with mgarepo and add the packages to qarepo Get the buildrequires and can confirm some of the packages in qarepo are fetched as part of the packages to build docker Build docker without issues CC:
(none) =>
andrewsfarm I remember building docker on Foolishness for a previous 32-bit-only bug. It was an... experience. Thing is, I don't remember any of the details of how to do it, so I'd have a difficult time repeating the feat. You're in good company, Herman. Validating. Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2024-0181.html Resolution:
(none) =>
FIXED |