ALT-PU-2025-11516-1
Package golang updated to version 1.25.1-alt0.port for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2025-09-22
Modified: 2025-09-24
Modified: 2025-09-24
CVE-2025-47910
When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.
Severity: MEDIUM (5.4)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
References:
Closed bugs
056-debuginfo.brp: ERROR: Files with stripped .debug_info found, terminating build