[paho-dev] Vulnerability found on v1.4.3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[paho-dev] Vulnerability found on v1.4.3

From: Sudarshan Reddy <moramsudarshan@xxxxxxxxx>
Date: Tue, 30 Jul 2024 16:09:13 +0530
Delivered-to: paho-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/paho-dev/>
List-help: <mailto:paho-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/paho-dev>, <mailto:paho-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/paho-dev>, <mailto:paho-dev-request@eclipse.org?subject=unsubscribe>

Hi Team,

I have found an Vulnerability found in v1.4.3 release and it has been fixed in the master branch. Just wanted to check when the new release was happening?
repo: eclipse/paho.mqtt.golang
version: v1.4.3
release: july 2023

Vulnerability:
NAME : golang.org/x/net
INSTALLED: v.0.10.0
FIXED_IN : 0.17.0
type : go module
vulnerability:GHSA-4374-p667-p6c8
severity: High

Can you please reply with the next release date?

Thanks,

Sudharsan

Follow-Ups:
- Re: [paho-dev] Vulnerability found on v1.4.3
  - From: Matt Brittan

Prev by Date: Re: [paho-dev] Paho Python client v2.1.0 release
Next by Date: Re: [paho-dev] Vulnerability found on v1.4.3
Previous by thread: [paho-dev] mqtt.cpp server_response doesn't return scheme
Next by thread: Re: [paho-dev] Vulnerability found on v1.4.3
Index(es):
- Date
- Thread

Breadcrumbs