[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-68119/golang-1.24
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Feb 1 12:06:57 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e6764cbc by Salvatore Bonaccorso at 2026-02-01T13:06:19+01:00
Add Debian bug reference for CVE-2025-68119/golang-1.24
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5760,7 +5760,7 @@ CVE-2025-61730 (During the TLS 1.3 handshake if multiple messages are sent in re
NOTE: Fixed by: https://github.com/golang/go/commit/ad2cd043db66cd36e1f55359638729d2c8ff3d99 (go1.24.12)
CVE-2025-68119 (Downloading and building modules with malicious version strings can ca ...)
- golang-1.25 1.25.6-1 (bug #1125916)
- - golang-1.24 <unfixed>
+ - golang-1.24 <unfixed> (bug #1126770)
- golang-1.19 <removed>
- golang-1.15 <removed>
[bullseye] - golang-1.15 <postponed> (Limited support, minor issue, follow bookworm DSAs/point-releases)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e6764cbcbb383cc17f2c62aa7361b9e81d72a2ac
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e6764cbcbb383cc17f2c62aa7361b9e81d72a2ac
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260201/c7d2d41f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list