Skip to content

chore(deps): update module golang.org/x/sys to v0.44.0 [security]#382

Open
renovate-coop-norge[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-sys-vulnerability
Open

chore(deps): update module golang.org/x/sys to v0.44.0 [security]#382
renovate-coop-norge[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-sys-vulnerability

Conversation

@renovate-coop-norge

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/sys v0.41.0v0.44.0 age confidence
golang.org/x/sys v0.43.0v0.44.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

CVE-2026-39824 / GO-2026-5024

More information

Details

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@renovate-coop-norge renovate-coop-norge Bot added dependencies Pull requests that update a dependency file renovate golang.org/x/sys labels May 23, 2026
@renovate-coop-norge

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: week48/govfs/go.sum
Command failed: go get -t ./...
go: gopkg.in/guregu/null.v6@v6.0.0: parsing go.mod:
	module declares its path as: github.com/guregu/null/v6
	        but was required as: gopkg.in/guregu/null.v6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file golang.org/x/sys renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants