Linux Distros Unpatched Vulnerability : CVE-2019-14809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is relat...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.22-openssl (SUSE-SU-2024:3938-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3938-1 advisory. This update ships go1.22-openssl 1.22.7.1 jscSLE-18320 - Update to version 1.22.7.1 cut from the...

Important Photon OS Security Update - PHSA-2024-4.0-0704

Updates of 'python3', 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0799

Updates of 'go' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-3.0-0785

Updates of 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0783

Updates of 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0668

Updates of 'go' packages of Photon OS have been released...

Security Bulletin: Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Standard.

Summary Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Standard. IBM CICS TX Standard has addressed the issues. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: Protocol Buffers protobuf-go is vulnerable to a denial of service, caused by an infinite loop...

Security Bulletin: Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a memory exhaustion flaw due to floo...

Important Photon OS Security Update - PHSA-2024-3.0-0746

Updates of 'go' packages of Photon OS have been released...

AlmaLinux 8 : container-tools:4.0 (ALSA-2024:0121)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0121 advisory. golang: archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 golang: net/http/httputil: ReverseProxy should not forward unparseabl...

SUSE-SU-2023:4471-1 Security update for go1.21

This update for go1.21 fixes the following issues: go1.21.4 released 2023-11-07 includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and runtime/cgo packages. security: fix CVE-2023-45283 CVE-2023-45284...

GHSA-94W9-97P3-P368 CSRF Token Reuse Vulnerability

A Cross-Site Request Forgery CSRF vulnerability has been identified in the application, which allows an attacker to inject arbitrary values and forge malicious requests on behalf of a user. This vulnerability can allow an attacker to inject arbitrary values without any authentication, or perform...

Important Photon OS Security Update - PHSA-2023-3.0-0670

Updates of 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0118

Updates of 'go' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-4.0-0484

Updates of 'go' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0066

Updates of 'go' packages of Photon OS have been released...

HashiCorp Consul Incorrect Access Control vulnerability

HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured. Specific Go Packages Affected github.com/hashicorp/consul/acl...

GHSA-H65H-V7FW-4P38 HashiCorp Consul Incorrect Access Control vulnerability

HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured. Specific Go Packages Affected github.com/hashicorp/consul/acl...

CentOS 8 : Image Builder (CESA-2023:2780)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:2780 advisory. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closin...