dutchcoders/transfer.sh
1
0
Fork 0
mirror of https://github.com/dutchcoders/transfer.sh.git synced 2026-02-06 07:22:17 +00:00
Code Issues 48 Actions Packages Projects Releases Wiki Activity

Why were the patch versions for CVE-2022-40931 released so late? #56

New Issue
Closed
opened 2026-01-19 18:28:47 +00:00 by michael · 1 comment
michael commented 2026-01-19 18:28:47 +00:00
Owner
Copy Link

Originally created by @Silence-worker-02 on GitHub.

Hello, we are a research team working on Golang. During our investigation, we found CVE-2022-40931 was addressed in commit 31ad4e01e1. However, we noticed that the patch version (v1.5.0) was released after long time (202 days). We are curious about the reasons behind the delayed release of the patch version, as it may hinder the efficient distribution of patches to downstream users. Could the reason be

1.Issues with testing and CI checking.

2.Other commits have to be incorporated into one release.

3.By convention, versions are not frequently released.

4.Other reasons.

Thank you for your attention, and we look forward to receiving your reply.

Originally created by @Silence-worker-02 on GitHub. Hello, we are a research team working on Golang. During our investigation, we found CVE-2022-40931 was addressed in commit 31ad4e01e158497519f8680c187e1ceb8594c59d. However, we noticed that the patch version (v1.5.0) was released after long time (202 days). We are curious about the reasons behind the delayed release of the patch version, as it may hinder the efficient distribution of patches to downstream users. Could the reason be 1.Issues with testing and CI checking. 2.Other commits have to be incorporated into one release. 3.By convention, versions are not frequently released. 4.Other reasons. Thank you for your attention, and we look forward to receiving your reply.
michael commented 2026-01-19 18:28:47 +00:00
Author
Owner
Copy Link

@paolafrancesca commented on GitHub:

Hello,

according to the personal time available to the mantainers during a specific time frrame, versions are not frequently released.

We'll keep an eye to release a new patch version as soon as we'll be aware and fixed to be affected by another security issue

@paolafrancesca commented on GitHub: Hello, according to the personal time available to the mantainers during a specific time frrame, versions are not frequently released. We'll keep an eye to release a new patch version as soon as we'll be aware and fixed to be affected by another security issue
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
docker
enhancement
hacktoberfest
help wanted
invalid
question
storage provider
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#56
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?