On Fri, May 07, 2021 at 12:05:22AM -0700, christoph...@gmail.com wrote:
The issue for the security problem is here:
https://github.com/satori/go.uuid/issues/73
<https://github.com/satori/go.uuid/issues/73#issuecomment-833337384>
There is a CVE identifier for this security problem:
https://github.com/satori/go.uuid/issues/115
It is 3 years old and hasn't been resolved.
The latter statement appears to be incorrect. The bug in question is not
included in the latest tagged release as it was introduced at a later point.
In April 2018, commit 75cca53 ("Fix potential non-random UUIDs") fixed the bug
so master is not affected either.
--
You received this message because you are subscribed to the Google Groups
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/golang-nuts/YJXfRVnxMpFHXPXh%40horsthansen.slrz.net.
