Mageia alert MGASA-2026-0190 (golang-x-net)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0190: Updated golang-x-net packages fix security vulnerability
Date:
             
 
Wed, 10 Jun 2026 07:07:52 +0200
Message-ID:
             
 
<20260610050752.1428BA0E2E@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0190 - Updated golang-x-net packages fix security vulnerability

Publication date: 10 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0190.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2024-45338

Description:
CVE-2024-45338 An attacker can craft an input to the Parse functions
that would be processed non-linearly with respect to its length,
resulting in extremely slow parsing. This could cause a denial of
service.

References:
- https://bugs.mageia.org/show_bug.cgi?id=34019
- https://github.com/advisories/GHSA-w32m-9786-jp63
- https://www.cve.org/CVERecord?id=CVE-2024-45338

SRPMS:
- 9/core/golang-x-net-0.7.0-2.1.mga9