[SECURITY] Fedora 43 Update: delve-1.26.0-1.fc43

Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...

Security Bulletin: IBM Storage Ceph is vulnerable to Exposure of Sensitive Information Through Data Queries in Golang Go (CVE-2023-45288)

Summary Golang Go is used by IBM Storage Ceph as part of RGW and in assorted other locations. CVE-2023-45288 Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION...

[SECURITY] Fedora 42 Update: golang-github-alecthomas-chroma-2-2.14.0-4.fc42

A general purpose syntax highlighter in pure Go...

[SECURITY] Fedora 43 Update: golang-github-jwt-5-5.2.1-6.fc43

A Go implementation of JSON Web Tokens...

Fedora 43 : golang-github-evanw-esbuild (2025-4068748872)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4068748872 advisory. Rebuild for CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

[SECURITY] Fedora 43 Update: gdu-5.32.0-1.fc43

Fast disk usage analyzer with console interface written in Go...

[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42

Fast disk usage analyzer with console interface written in Go...

Exploit for CVE-2025-14847

Mongobleed CVE-2025-14847 – Go Proof of Concept This reposi...

The vulnerability of the HostnameError.Error() function in the crypto/x509 package written in the Go programming language allows a attacker to cause a service failure.

The vulnerability of the HostnameError.Error function in the crypto/x509 package in the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

RLSA-2025:23948 Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...

[SECURITY] Fedora 42 Update: gobuster-3.8.2-2.fc42

Directory/File, DNS and VHost busting tool written in Go...

[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43

Directory/File, DNS and VHost busting tool written in Go...

github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation

A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...

ROS-20251222-7301

A vulnerability in the Golang programming language is related to input validation errors when processing directory traversal sequences in filenames. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

RLSA-2025:23295 Moderate: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For...

RockyLinux 10 : skopeo (RLSA-2025:23294)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23294 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...

CLSA-2025-1766138358 Update of golang

Update to Go 1.25.3...

SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2025:4421-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4421-1 advisory. This update for buildah rebuilds it against the current security release of GO. Tenable has extracted the preceding descriptio...

CVE-2025-14764

The CVE-2025-14764 entry concerns the Amazon S3 Encryption Client for Go. The identified issue is a missing cryptographic key commitment when the encrypted data key (EDK) is stored in an Instruction File, which could allow a user with write access to the S3 bucket to introduce a rogue EDK that de...

CVE-2025-14764

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...