[Git][security-tracker-team/security-tracker][master] Track fixes for golang-golang-x-net via unstable upload

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c01c9fb2 by Salvatore Bonaccorso at 2026-10-09T06:41:51+02:00
Track fixes for  golang-golang-x-net via unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4,20 +4,24 @@ CVE-2026-97032
 	- golang-1.25 <removed>
 	- golang-1.24 <removed>
 	- golang-1.19 <removed>
+	- golang-golang-x-net 1:0.60.0-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
 	NOTE: https://github.com/golang/go/issues/81867
 	NOTE: Fixed by: https://github.com/golang/go/commit/12acaf3086437e140e2dd3b7d2c30fdd633c5fe0 (go1.27.2)
 	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+	NOTE: Fixed by: https://github.com/golang/net/commit/18ece0ce30bc35fa81fe72028bf309bb3ff3f4a5 (v0.60.0)
 CVE-2026-78659
 	- golang-1.27 1.27.2-1
 	- golang-1.26 1.26.9-1
 	- golang-1.25 <removed>
 	- golang-1.24 <removed>
 	- golang-1.19 <removed>
+	- golang-golang-x-net 1:0.60.0-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
 	NOTE: https://github.com/golang/go/issues/81857
 	NOTE: Fixed by: https://github.com/golang/go/commit/cbb0fb8b51cba866018b8a0fb4b5458f16c5c80b (go1.27.2)
 	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+	NOTE: Fixed by: https://github.com/golang/net/commit/57f4235f83712a299328015548240512213a3852 (v0.60.0)
 CVE-2026-97031
 	- golang-1.27 1.27.2-1
 	- golang-1.26 1.26.9-1
@@ -104,20 +108,23 @@ CVE-2026-78669
 	- golang-1.25 <removed>
 	- golang-1.24 <removed>
 	- golang-1.19 <removed>
+	- golang-golang-x-net 1:0.60.0-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
 	NOTE: https://github.com/golang/go/issues/81742
 	NOTE: Fixed by: https://github.com/golang/go/commit/1d58cdaa1069e259b60c324ec77472f09f23d92e (go1.27.2)
 	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+	NOTE: Fixed by: https://github.com/golang/net/commit/cc7d34fd2dd5864bcafe3e5e0a84919240be98c0 (v0.60.0)
 CVE-2026-78660
 	- golang-1.27 1.27.2-1
 	- golang-1.26 1.26.9-1
 	- golang-1.25 <removed>
 	- golang-1.24 <removed>
 	- golang-1.19 <removed>
+	- golang-golang-x-net 1:0.60.0-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
 	NOTE: https://github.com/golang/go/issues/81115
 	NOTE: Fixed by: https://github.com/golang/go/commit/072779d81582543bf2872c259e0c6cceea728de4 (go1.27.2)
-	TODO: check might need tracking for golang-golang-x-net
+	NOTE: Fixed by: https://github.com/golang/net/commit/28247830e9fb37184c6be718f483a0c7d0949022 (v0.60.0)
 CVE-2026-56857
 	- golang-1.27 <not-affected> (Only affects Go on Windows)
 	- golang-1.26 <not-affected> (Only affects Go on Windows)
@@ -142,10 +149,12 @@ CVE-2026-78663
 	- golang-1.25 <removed>
 	- golang-1.24 <removed>
 	- golang-1.19 <removed>
+	- golang-golang-x-net 1:0.60.0-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
 	NOTE: https://github.com/golang/go/issues/81743
 	NOTE: Fixed by: https://github.com/golang/go/commit/31dc9e2449e394439498142451627af52626d7c4 (go1.27.2)
 	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+	NOTE: Fixed by: https://github.com/golang/net/commit/2d03f9dcd22da1be6f645ddfd0541fd94d68e5db (v0.60.0)
 CVE-2026-XXXX [TROVE-2026-062]
 	- tor 0.4.9.14-1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41413



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c01c9fb272dc8e8b033dcf02596203c215b66486

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c01c9fb272dc8e8b033dcf02596203c215b66486
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/057c5a19/attachment-0001.htm>