ALT-PU-2025-3899-1

Package update golang in branch sisyphus_loongarch64

Version1.24.1-alt1
Task#0
Published2025-03-05
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2025-22870
MEDIUM4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Published: 2025-03-12Modified: 2026-04-16
CVSS 3.xMEDIUM 4.4
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L