CVE-2014-7189
Published: October 7, 2014Last modified: July 22, 2025
Description
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | go | Not affected (1.19.9-r1) |
| Stream | go | Not affected (1.21.0-r2) | |
| Hardened Containers | 23 LTS | go | Not affected (1.19.9-r1) |
| Stream | go | Not affected (1.21.0-r2) |