mirrors
/
forgejo
mirror of https://codeberg.org/forgejo/forgejo.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request 'fix(security): CVE-2024-24788 malformed DNS message' (#3671) from earl-warren/forgejo:wip-go-1.22.3 into forgejo 

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/3671
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
This commit is contained in:
Earl Warren 2024-05-08 14:44:52 +00:00
parent a2c8fe0370 f3045f0519
commit 7729cb3ecc
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
go.mod
View File

@ -1,6 +1,6 @@
module code.gitea.io/gitea
go 1.22.2
go 1.22.3
require (
code.gitea.io/actions-proto-go v0.4.0

1
release-notes/8.0.0/3671.md Normal file
View File

@ -0,0 +1 @@
CVE-2024-24788: a malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.