AZL-98823 CVE-2025-0913 affecting package golang 1.27.1-1

os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with OCREATE and OEXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would...

CVE-2025-0913

The Go programming language (specifically the os package) exhibited inconsistent behavior when calling os.OpenFile(path, os.O_CREATE|O_EXCL) on dangling symlinks. While Unix systems correctly never followed symlinks, Windows systems would create a file in the symlink's location if it pointed to a...

Updated golang packages fix security vulnerabilities

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673. os: inconsistent handling of OCREATE|OEXCL on Unix and Windows os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when th...