Updated golang packages fix security vulnerability

🗓️ 13 Oct 2021 19:39:52Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 71 Views

Updated golang packages fix security vulnerability, including CVE-2021-33196, CVE-2021-39293, and CVE-2021-3829

Reporter	Title	Published	Views	Family All 216
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to a variety of issues due to 3rd party software	27 Sep 202417:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2021-39293	26 May 202214:15	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams affected by potential buffer overflow in Golang (CVE-2021-38297)	21 Dec 202117:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to vulnerabilities from Golang Go and IBM WebSphere Application Server Liberty (CVE-2021-39293 and CVE-2021-39038)	8 Jul 202207:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has multiple vulnerabilities associated with the Go runtime (CVE-2021-29923, CVE-2021-31525, CVE-2021-33194, CVE-2021-33195, CVE-2021-33196, CVE-2021-33197, CVE-2021-33198)	21 Jul 202212:35	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.6 contains fixes for multiple security vulnerabilities.	25 Oct 202213:11	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	26 Mar 202504:04	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	8	any	golang	1.17.2-1	golang-1.17.2-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
groups	www.groups.google.com/g/golang-announce/c/dx9d7IOseHw
groups	www.groups.google.com/g/golang-announce/c/7efr4VBoZIw
groups	www.groups.google.com/g/golang-announce/c/AEBu9j7yj5A
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/5EY52N4KALEDKULS6YHUPW2C7OJTGHTS/
security	www.security.archlinux.org/CVE-2021-38297

13 Oct 2021 19:39Current

8High risk

Vulners AI Score8

CVSS 27.5

CVSS 3.19.8

EPSS0.10299

golang security vulnerability cve-2021-33196 cve-2021-39293 cve-2021-38297 newreader openreader archive/zip panic fatal error wasm modules goarch=wasm goos=js overwritten data unix