Skip to content

chore(deps): bump github.com/Azure/go-ntlmssp from 0.0.0-20211209120228-48547f28849e to 0.1.1#894

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1
Closed

chore(deps): bump github.com/Azure/go-ntlmssp from 0.0.0-20211209120228-48547f28849e to 0.1.1#894
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/Azure/go-ntlmssp from 0.0.0-20211209120228-48547f28849e to 0.1.1.

Release notes

Sourced from github.com/Azure/go-ntlmssp's releases.

v0.1.1

Fix CVE-2026-32952: A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.

v0.1.0

What's Changed

New Contributors

Full Changelog: Azure/go-ntlmssp@v0.0.1...v0.1.0

v0.0.1

What's Changed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 23, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1 branch 2 times, most recently from 92fada3 to 8aa468c Compare May 18, 2026 16:49
@dependabot
chore(deps): bump github.com/Azure/go-ntlmssp
d457ef4 
Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) from 0.0.0-20211209120228-48547f28849e to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases)
- [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
  dependency-version: 0.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1 branch from 8aa468c to d457ef4 Compare May 18, 2026 16:59
@Gearheads

Gearheads commented May 19, 2026

Copy link
Copy Markdown
Collaborator

This change breaks kconnect. This dependency is an indirect dependency, and is required by https://github.com/Versent/saml2aws/blob/master/go.mod#L10. The maintainers of that project will need to create a new release that supports this new version of github.com/Azure/go-ntlmssp. Therefore, until we have a new version of Versent/saml2aws I think we can close out this PR.

@Gearheads Gearheads closed this May 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1 branch May 19, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Gearheads Gearheads Awaiting requested review from Gearheads Gearheads is a code owner

@kishoregv kishoregv Awaiting requested review from kishoregv kishoregv is a code owner

@niroowns niroowns Awaiting requested review from niroowns niroowns is a code owner

@awatterson22 awatterson22 Awaiting requested review from awatterson22 awatterson22 is a code owner

@felixdeleon felixdeleon Awaiting requested review from felixdeleon felixdeleon is a code owner

@gseshagirirao gseshagirirao Awaiting requested review from gseshagirirao gseshagirirao is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Gearheads