Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #47650 golang.org/x/crypto 0.50.0 -> 0.52.0
    Infos
    #47650
    Clarck Robinson (robinsoc)
    2026-05-22 14:51
    2026-05-22 13:17
    49391
    Details
    golang.org/x/crypto 0.50.0 -> 0.52.0

    Fixes CVE-2026-39829 and CVE-2026-39831. Tuleap is not impacted by these issues because none of the Go code implements an SSH server.

    https://go.googlesource.com/crypto/+/refs/tags/v0.52.0

    See advisories: https://pkg.go.dev/vuln/GO-2026-5018 and https://pkg.go.dev/vuln/GO-2026-5019

    Dependencies
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2026-05-22
    Attachments
    Empty
    References
    Referenced by request #47650

    Artifact

    rel #47138 17.6

    Other

    gerrit #37805
    Display settings

    Follow-ups

    User avatar
    Joris MASSON (jmasson)2026-05-22 14:50
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    • Status changed from New to Under review