DEBIAN-CVE-2025-47907

Source
https://security-tracker.debian.org/tracker/CVE-2025-47907
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-47907.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2025-47907
Upstream
Published
2025-08-07T16:15:30Z
Modified
2025-09-18T05:17:54Z
Summary
[none]
Details

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

References

Affected packages

Debian:11 / golang-1.15

Package

Name
golang-1.15
Purl
pkg:deb/debian/golang-1.15?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / golang-1.19

Package

Name
golang-1.19
Purl
pkg:deb/debian/golang-1.19?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/debian/golang-1.24?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/debian/golang-1.24?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "not yet assigned"
}