Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
897bff8b by Salvatore Bonaccorso at 2026-08-08T11:41:01+02:00
Track fixes for two golang-github-go-git-go-git-v6 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -203,7 +203,7 @@ CVE-2026-71559 (Deserialization of Untrusted Data
vulnerability in the Go implem
CVE-2026-71558 (Heap type confusion vulnerability in Apache Fory C++
deserialization. ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-71557 (go-git is an extensible git implementation library written in
pure Go. ...)
- - golang-github-go-git-go-git-v6 <unfixed> (bug #1143904)
+ - golang-github-go-git-go-git-v6 6.0.0~alpha.5-1 (bug #1143904)
- golang-github-go-git-go-git <unfixed> (bug #1143903)
NOTE:
https://github.com/go-git/go-git/security/advisories/GHSA-qgq7-7hm3-q39j
NOTE: https://github.com/go-git/go-git/pull/2247
@@ -211,7 +211,7 @@ CVE-2026-71557 (go-git is an extensible git implementation
library written in pu
NOTE: https://github.com/go-git/go-git/pull/2254
NOTE: Fixed by (merge):
https://github.com/go-git/go-git/commit/4a0e66d555de5f9a30c31e2df64f445f42bd01e7
(v5.19.2)
CVE-2026-71556 (go-git is an extensible git implementation library written in
pure Go. ...)
- - golang-github-go-git-go-git-v6 <unfixed> (bug #1143904)
+ - golang-github-go-git-go-git-v6 6.0.0~alpha.5-1 (bug #1143904)
- golang-github-go-git-go-git <unfixed> (bug #1143903)
NOTE:
https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm
NOTE: Fixed by:
https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac
(v6.0.0-alpha.5)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/897bff8b0e008ea27995454672108ceb34b950b8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/897bff8b0e008ea27995454672108ceb34b950b8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
