openSUSE Security Update : go1.15 (openSUSE-2021-480)

This update for go1.15 fixes the following issues : - go1.15.10 released 2021-03-11 bsc1175132 - go1.15.9 released 2021-03-10 bsc1175132 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. This update was imported from the SUSE:SLE-15:Upda...

OPENSUSE-SU-2021:0480-1 Security update for go1.15

This update for go1.15 fixes the following issues: - go1.15.10 released 2021-03-11 bsc1175132 - go1.15.9 released 2021-03-10 bsc1175132 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. This update was imported from the SUSE:SLE-15:Updat...

[SECURITY] [DSA 4877-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4877-1 [email protected] https://www.debian.org/security/ Alberto Garcia March 27, 2021 https://www.debian.org/security/faq -...

Security update for go1.15 (moderate)

openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2021:0480-1 Rating: moderate References: 1175132 1183333 Cross-References: CVE-2021-27918 CVSS scores: CVE-2021-27918 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An...

SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:0938-1)

This update for go1.15 fixes the following issues : go1.15.10 released 2021-03-11 bsc1175132 go1.15.9 released 2021-03-10 bsc1175132 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : go1.16 (SUSE-SU-2021:0937-1)

This update for go1.16 fixes the following issues : go1.16.2 released 2021-03-11 bsc1182345 go1.16.1 released 2021-03-10 bsc1182345 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. - CVE-2021-27919: Fixed an issue where archive/zip: can...

[ASA-202103-25] wpewebkit: multiple issues

Arch Linux Security Advisory ASA-202103-25 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2020-27918 CVE-2020-29623 CVE-2021-1765 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1870 Package : wpewebkit Type : multiple issues Remote : Yes Link :...

SUSE-SU-2021:0937-1 Security update for go1.16

This update for go1.16 fixes the following issues: - go1.16.2 released 2021-03-11 bsc1182345 - go1.16.1 released 2021-03-10 bsc1182345 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. - CVE-2021-27919: Fixed an issue where archive/zip:...

CVE-2021-27918

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...

CVE-2021-27918

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...

CVE-2021-27918

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...

Security fix for the ALT Linux 10 package golang version 1.16.1-alt1

March 11, 2021 Alexey Shabalin 1.16.1-alt1 - New version 1.16.1. - Fixes: + CVE-2021-27918 + CVE-2021-27919 - Remove test for other platform scripts...

Security fix for the ALT Linux 9 package golang version 1.15.9-alt1

March 11, 2021 Alexey Shabalin 1.15.9-alt1 - New version 1.15.9. - Fixes: + CVE-2021-27918 + CVE-2021-27919...

CVE-2021-27918

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...

CVE-2021-27918

The CVE-2021-27918 issue affects encoding/xml in Go (golang): if a custom TokenReader returns EOF in the middle of an XML element, Decode, DecodeElement, or Skip can enter an infinite loop. This vulnerability is present in Go before 1.15.9 and in 1.16.x before 1.16.1. Public notices describe the ...

CVE-2021-27918

Removed by vendor...

CVE-2021-27918

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...

CVE-2020-27918

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary...

CVE-2020-27918

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary...

CVE-2020-27918

CVE-2020-27918 is a use-after-free vulnerability in WebKitGTK/WebKit where processing maliciously crafted web content may lead to arbitrary code execution. The issue is documented across multiple advisories and is fixed upstream in WebKitGTK/WebKit version 2.30.6 (and corresponding package update...