Lucene search
GoogleOSV:SUSE-SU-2024:1970-1HistoryJun 10, 2024 - 6:05 p.m.
Security update for go1.22
2024-06-1018:05:07
Google
osv.dev
1
security update
go1.22
cve-2024-24789
cve-2024-24790
archive/zip
ipv4-mapped ipv6 addresses
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
This update for go1.22 fixes the following issues:
go1.21.11 release (bsc#1212475).
- CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973).
- CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (bsc#1225974).
Related
openvas
openvas
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1970-1)
2024-06-12 00:00:00
Mageia: Security Advisory (MGASA-2024-0217)
2024-06-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:3360-1)
2024-09-24 00:00:00
osv
osv
Moderate: golang security update
2024-07-15 12:18:45
go1.21-1.21.11-1.1 on GA media
2024-06-15 00:00:00
Security update for go1.21
2024-06-10 18:04:52
redhat
redhat
(RHSA-2024:4785) Moderate: Network Observability 1.6.1 for OpenShift
2024-08-07 00:47:01
(RHSA-2024:4237) Moderate: go-toolset security update
2024-07-02 13:55:03
(RHSA-2024:4212) Moderate: golang security update
2024-07-02 00:13:40
rocky
rocky
golang security update
2024-07-15 12:18:45
nessus
nessus
Photon OS 5.0: Go PHSA-2024-5.0-0302
2024-07-24 00:00:00
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2024-646)
2024-06-24 00:00:00
amazon
amazon
Medium: golang
2024-06-19 19:15:00
almalinux
almalinux
Moderate: golang security update
2024-07-02 00:00:00
Moderate: go-toolset security update
2024-07-02 00:00:00
Moderate: grafana security update
2024-08-13 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2024-06-04 00:00:00
redos
redos
ROS-20240611-15
2024-06-11 00:00:00
ROS-20240826-20
2024-08-26 00:00:00
oraclelinux
oraclelinux
go-toolset security update
2024-07-03 00:00:00
golang security update
2024-07-02 00:00:00
grafana security update
2024-08-13 00:00:00
mageia
mageia
Updated golang packages fix security vulnerabilities
2024-06-14 04:31:37
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0637
2024-06-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-24790 affecting package golang for versions less than 1.21.11-1
2024-09-27 09:12:43
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
Related for OSV:SUSE-SU-2024:1970-1