Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 4.4
  CVE-2025-22870 Public exploit

  HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be prox…

  Go standard library golang.org/x/net net/http golang.org/x/net/proxy Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 12, 2025

Revision history

1. 2026-07-01 #46

   Neue Updates von Red Hat aufgenommen

2. 2026-06-29 #45

   Neue Updates von openSUSE aufgenommen

3. 2026-03-11 #44

   Neue Updates von Splunk-SVD aufgenommen

4. 2026-02-11 #43

   Neue Updates von SUSE aufgenommen

5. 2026-01-25 #42

   Neue Updates von IBM aufgenommen

6. 2025-12-30 #41

   Neue Updates von openSUSE aufgenommen

7. 2025-12-28 #40

   Neue Updates von openSUSE aufgenommen

8. 2025-12-23 #39

   Neue Updates von openSUSE aufgenommen

9. 2025-10-19 #38

   Neue Updates von Fedora aufgenommen

10. 2025-09-10 #37

    Neue Updates von SUSE aufgenommen

11. 2025-09-01 #36

    Neue Updates von IBM aufgenommen

12. 2025-08-13 #35

    Neue Updates von Fedora aufgenommen

13. 2025-08-03 #34

    Neue Updates von SUSE aufgenommen

14. 2025-07-27 #33

    Neue Updates von SUSE und Fedora aufgenommen

15. 2025-07-15 #32

    Neue Updates von Fedora aufgenommen

16. 2025-07-14 #31

    Neue Updates von Fedora aufgenommen

17. 2025-07-13 #30

    Neue Updates von Fedora aufgenommen

18. 2025-07-10 #29

    Neue Updates von Fedora aufgenommen

19. 2025-07-08 #28

    Neue Updates von Fedora aufgenommen

20. 2025-07-07 #27

    Neue Updates von Splunk-SVD aufgenommen

21. 2025-07-03 #26

    Neue Updates von Fedora aufgenommen

22. 2025-06-23 #25

    Neue Updates von IBM aufgenommen

23. 2025-06-19 #24

    Neue Updates von Ubuntu aufgenommen

24. 2025-06-17 #23

    Neue Updates von SUSE aufgenommen

25. 2025-06-09 #22

    PoC aufgenommen

References

• Go Security Release vom 2025-03-04
  https://groups.google.com/g/golang-nuts/c/ebjdgW3RQkw
• Golang GitHub vom 2025-03-04
  https://github.com/golang/go/issues/71984
• Gitea Release Notes vom 2025-03-05
  https://blog.gitea.com/release-of-1.23.5
• SUSE Security Update SUSE-SU-2025:0803-1 vom 2025-03-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJBC3NHBEH222VJA46GNC2AAOCEC4QS2/
• SUSE Security Update SUSE-SU-2025:0802-1 vom 2025-03-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/27PPJWGMB2MENR7G6MIZ2ZO2WRYPKXTM/
• openSUSE Security Update OPENSUSE-SU-2025:14856-1 vom 2025-03-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGP5DLOANFXXCPCB6D6IN7LAI2JGB47U/
• openSUSE Security Update OPENSUSE-SU-2025:14855-1 vom 2025-03-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CFCIWTRB7LZ4UHY2QXBXQKKZLF4LAY6Y/
• Fedora Security Advisory FEDORA-2025-2FE21E3DA5 vom 2025-03-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-2fe21e3da5
• Fedora Security Advisory FEDORA-2025-73800111E8 vom 2025-03-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-73800111e8
• openSUSE Security Update OPENSUSE-SU-2025:14906-1 vom 2025-03-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZCJXWQL2R6EHXY7YCD624TCTDR3SLYJD/
• Fedora Security Advisory FEDORA-2025-AF00197966 vom 2025-03-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-af00197966
• SUSE Security Update SUSE-SU-2025:1007-1 vom 2025-03-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZSAEYF3A27FLDE73L37JOMELMSBDUGTZ/
• Gitea Blog vom 2025-03-25
  https://blog.gitea.com/release-of-1.23.6
• Amazon Linux Security Advisory ALAS-2025-2795 vom 2025-03-25
  https://alas.aws.amazon.com/AL2/ALAS-2025-2795.html
• SUSE Security Update SUSE-SU-2025:1094-1 vom 2025-04-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/UDJ46EDCE75WMA4F3NVFPL2RXO3XN7B6/
• SUSE Security Update SUSE-SU-2025:1094-1 vom 2025-04-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UDJ46EDCE75WMA4F3NVFPL2RXO3XN7B6/
• Fedora Security Advisory FEDORA-2025-556D8C02D7 vom 2025-04-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-556d8c02d7
• Fedora Security Advisory FEDORA-2025-12AC4E9CFD vom 2025-04-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-12ac4e9cfd
• Fedora Security Advisory FEDORA-EPEL-2025-6653A27CFD vom 2025-04-11
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6653a27cfd
• Fedora Security Advisory FEDORA-2025-B0915F0A19 vom 2025-04-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-b0915f0a19
• Fedora Security Advisory FEDORA-EPEL-2025-7C57E75CBC vom 2025-04-11
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-7c57e75cbc
• openSUSE Security Update OPENSUSE-SU-2025:14988-1 vom 2025-04-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IQWUH5CIGBJCVZRE6D76AYCLT3MS47XX/
• Fedora Security Advisory FEDORA-2025-2280949271 vom 2025-04-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-2280949271
• Fedora Security Advisory FEDORA-2025-EECB0EA534 vom 2025-04-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-eecb0ea534
• IBM Security Bulletin 7232437 vom 2025-05-03
  https://www.ibm.com/support/pages/node/7232437
• Fedora Security Advisory FEDORA-2025-121049BBF7 vom 2025-05-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-121049bbf7
• Red Hat Security Advisory RHSA-2025:7616 vom 2025-05-14
  https://access.redhat.com/errata/RHSA-2025:7616
• SUSE Security Update SUSE-SU-2025:20328-1 vom 2025-05-28
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020909.html
• SUSE Security Update SUSE-SU-2025:01731-1 vom 2025-05-28
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020921.html
• XEROX Security Advisory XRX25-012 vom 2025-06-02
  https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf
• SUSE Security Update SUSE-SU-2025:20278-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021044.html
• SUSE Security Update SUSE-SU-2025:20210-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021122.html
• SUSE Security Update SUSE-SU-2025:20196-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021144.html
• SUSE Security Update SUSE-SU-2025:20184-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021160.html
• Fedora Security Advisory FEDORA-2025-333708F4CE vom 2025-06-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-333708f4ce
• PoC CVE-2025-22870 vom 2025-06-09
  https://github.com/JoshuaProvoste/CVE-2025-22870
• SUSE Security Update SUSE-SU-2025:01988-1 vom 2025-06-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021559.html
• SUSE Security Update SUSE-SU-2025:01992-1 vom 2025-06-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021555.html
• SUSE Security Update SUSE-SU-2025:01990-1 vom 2025-06-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021557.html
• Ubuntu Security Notice USN-7574-1 vom 2025-06-19
  https://ubuntu.com/security/notices/USN-7574-1
• IBM Security Bulletin 7237702 vom 2025-06-24
  https://www.ibm.com/support/pages/node/7237702
• Fedora Security Advisory FEDORA-2025-C4C8863FD7 vom 2025-07-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-c4c8863fd7
• Splunk Security Advisory SVD-2025-0710 vom 2025-07-07
  https://advisory.splunk.com//advisories/SVD-2025-0710
• Fedora Security Advisory FEDORA-2025-6F02E8F9D3 vom 2025-07-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-6f02e8f9d3
• Fedora Security Advisory FEDORA-2025-9B9074CB93 vom 2025-07-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-9b9074cb93
• Fedora Security Advisory FEDORA-2025-A6574C5095 vom 2025-07-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-a6574c5095
• Fedora Security Advisory FEDORA-2025-AE934D102C vom 2025-07-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-ae934d102c
• Fedora Security Advisory FEDORA-2025-6EF99DEED4 vom 2025-07-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-6ef99deed4
• Fedora Security Advisory FEDORA-2025-18547FDA0A vom 2025-07-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-18547fda0a
• SUSE Security Update SUSE-SU-2025:20505-1 vom 2025-07-25
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021961.html
• Fedora Security Advisory FEDORA-EPEL-2025-72356603ED vom 2025-07-27
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-72356603ed
• Fedora Security Advisory FEDORA-2025-19C41F754C vom 2025-07-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-19c41f754c
• Fedora Security Advisory FEDORA-EPEL-2025-AB0FAE74F1 vom 2025-07-26
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ab0fae74f1
• SUSE Security Update SUSE-SU-2025:20504-1 vom 2025-07-25
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021962.html
• SUSE Security Update SUSE-SU-2025:20515-1 vom 2025-08-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022036.html
• Fedora Security Advisory FEDORA-2025-59ACAA6BD9 vom 2025-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-59acaa6bd9
• Fedora Security Advisory FEDORA-2025-E4ABB78D54 vom 2025-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-e4abb78d54
• IBM Security Bulletin 7243686 vom 2025-09-01
  https://www.ibm.com/support/pages/node/7243686
• SUSE Security Update SUSE-SU-2025:03159-1 vom 2025-09-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XFEARURIFMW7G6QDQKSBP7SQWCSCVYJS/
• Fedora Security Advisory FEDORA-2025-5872B9EC46 vom 2025-10-20
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-5872b9ec46
• openSUSE Security Update OPENSUSE-SU-2025:20177-1 vom 2025-12-23
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VDMAOCE6FMUQXLIFZPI7NDGE25ALNJNL/
• openSUSE Security Update OPENSUSE-SU-2025:0482-1 vom 2025-12-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HMPRAQU5GUS5B5UC67PSDP37L4LKC7JE/
• openSUSE Security Update OPENSUSE-SU-2025:0492-1 vom 2025-12-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELAD4UXESKHIWS4FSKWS4HUM7LFMUU7F/
• IBM Security Bulletin 7257912 vom 2026-01-23
  https://www.ibm.com/support/pages/node/7257912
• SUSE Security Update SUSE-SU-2026:0439-1 vom 2026-02-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024109.html
• Splunk Security Advisory SVD-2026-0306 vom 2026-03-11
  https://advisory.splunk.com//advisories/SVD-2026-0306
• openSUSE Security Update OPENSUSE-SU-2026:21079-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AFOVNL5466LSOBZHTPXUE54JU57XX2HM/
• openSUSE Security Update OPENSUSE-SU-2026:21136-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YVXYZMS3F435OANU3D2D7PMWLJP7HITS/
• Red Hat Security Advisory RHSA-2026:34342 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34342