Skip to content

[Go v1.23] CVE-2026-39821: idna: reject all-ASCII xn-- labels on all Go versions#2

Open
Atharva-Shinde wants to merge 1 commit into
openshift-sustaining:sustaining-v0.43.0from
Atharva-Shinde:sustaining-v0.43.0
Open

[Go v1.23] CVE-2026-39821: idna: reject all-ASCII xn-- labels on all Go versions#2
Atharva-Shinde wants to merge 1 commit into
openshift-sustaining:sustaining-v0.43.0from
Atharva-Shinde:sustaining-v0.43.0

Conversation

@Atharva-Shinde

Copy link
Copy Markdown
git checkout -b v0.43.0-sec tags/v0.43.0
curl -L -o CVE.patch "https://go-review.googlesource.com/changes/net~798020/revisions/2/patch?download&raw"
git am CVE.patch

CVE.patch

Manually backported this specific change from x/text.

For golang/go#78760
For golang/go#80298

Change-Id: I216ddcf5e85da2d6395bcc93873fe3ab6a6a6964
Reviewed-on: https://go-review.googlesource.com/c/net/+/798020
Reviewed-by: Nicholas Husin <husin@google.com>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Nicholas Husin <nsh@golang.org>
Reviewed-by: David Chase <drchase@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants