[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-29401/golang-github-gin-gonic-gin
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Jun 13 21:41:59 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a08f5149 by Salvatore Bonaccorso at 2023-06-13T22:41:09+02:00
Add Debian bug reference for CVE-2023-29401/golang-github-gin-gonic-gin
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9112,7 +9112,7 @@ CVE-2023-29402 (The go command may generate unexpected code at build time when u
NOTE: https://github.com/golang/go/commit/c0ed873cd8259f16d0da67eee783fda49f45ef61 (go1.20.5)
NOTE: https://github.com/golang/go/commit/c160b49b6d328c86bd76ca2fff9009a71347333f (go.1.19.10)
CVE-2023-29401 (The filename parameter of the Context.FileAttachment function is not p ...)
- - golang-github-gin-gonic-gin <unfixed>
+ - golang-github-gin-gonic-gin <unfixed> (bug #1037530)
NOTE: https://github.com/gin-gonic/gin/issues/3555
NOTE: https://github.com/gin-gonic/gin/commit/2d4bbec941551479b1fdf1e54ece03e6e82a7e72 (v1.9.1)
CVE-2023-29400 (Templates containing actions in unquoted HTML attributes (e.g. "attr={ ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a08f5149875979b15633893f65a6c593dec8e06c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a08f5149875979b15633893f65a6c593dec8e06c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230613/98a0da04/attachment.htm>
More information about the debian-security-tracker-commits
mailing list