Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #37553 golang.org/x/net: 0.21.0 -> 0.23.0
    Actions
    Infos
    #37553
    Joris MASSON (jmasson)
    2024-04-08 10:39
    2024-04-04 11:21
    39164
    Details
    golang.org/x/net: 0.21.0 -> 0.23.0

    Fixes CVE-2023-45288

    An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

    Agile Dashboard
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Joris MASSON (jmasson)
    Closed
    2024-04-04
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #36797 Tuleap Releases 15.8 Delivered 2024-04-24 13:48 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #37553

    Git commit

    tuleap/tuleap/stable

    fix: Close request #37553 golang.org/x/net: 0.21.0 -> 0.23.0 475baae7bb
    User avatar Joris MASSON (jmasson) , 2024-04-04 11:27
    Merge commit 'refs/changes/05/30805/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 77778899bf
    User avatar Nicolas Terray (nterray) , 2024-04-04 13:39
    Display settings

    Follow-ups