Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go version to 1.22.4+ for CVE 2024 24790 #3146

Open
ChristinaJShafer opened this issue Oct 3, 2024 · 0 comments
Open

Bump go version to 1.22.4+ for CVE 2024 24790 #3146

ChristinaJShafer opened this issue Oct 3, 2024 · 0 comments

Comments

@ChristinaJShafer
Copy link

CVE 2024 24790 affects versions of golang from 0 before 1.21.11 and from 1.22.0-0 before 1.22.4.

Published: 2024-06-05
Updated: 2024-06-05
Title: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Description
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Node-Exporter currently uses go 1.22.0 and includes use of Is methods in question.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant