tocsin

Alpine/go: critical 9.6

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com"

Action: Upgrade go to 1.26.8-r0 or later.

Affected

introducedfixedlast affected
01.26.8-r0-

Fixed versions

1.26.8-r0

Sources

published · modified · JSON