383 matches found
PT-2023-36270 · Unknown · Kubernetes Containerd
Name of the Vulnerable Software and Affected Versions: containerd affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.21 security release. Recommendations: At the moment, there is no information about a newer...
PT-2023-36279 · Cni +1 · Cni +1
Name of the Vulnerable Software and Affected Versions: cni affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The estimated number of potentially affected devices worldwide is not available. There is no information...
Exploit for Path Traversal in Fit2Cloud Jumpserver
CVE-2023-42819 CVE-2023-42819 Description of the Vulne...
CVE-2023-29453 Agent 2 package are built with Go version affected by CVE-2023-24538
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
Zabbix Code Injection Vulnerability
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in the Zabbix plugin Agent 2, which stems from the fact that Agent 2 packages are built using a version ...
SUSE-SU-2023:4021-1 Security update for conmon
This update for conmon fixes the following issues: conmon is rebuilt with go1.21. bsc1215806...
SUSE-SU-2023:3952-1 Security update for runc
This update of runc fixes the following issues: - Update to runc v1.1.8. Upstream changelog is available from . - rebuild the package with the go 1.21 security release bsc1212475...
SUSE: Security Advisory (SUSE-SU-2023:3867-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-EL-9-CLIENT-TOOLS-2023-3875 Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...
PT-2023-36264 · Hashicorp · Terraform-Provider-Aws
Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The terraform-provider-aws package has been rebuilt to incorporate this security...
UBUNTU-CVE-2023-39320
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules...
SUSE CVE-2023-39320
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules...
PT-2023-36257 · Amazon · Amazon-Ssm-Agent
Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the go 1.21 package, which is used by the amazon-ssm-agent. The package has been rebuilt with the go 1.21 security release to address...
PT-2023-9456 · Google +10 · Go +10
Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.20.8 dev-go/go-tools versions prior to 0.3.0 Description: The issue is related to the html/template package in the Go programming language, which does not properly handle HTML-like comment tokens or hashbang "!" comment...
PT-2023-5127 · Go +2 · Go +2
Name of the Vulnerable Software and Affected Versions: Go versions 1.21 and later Description: The go.mod toolchain directive can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloade...
SUSE-SU-2023:2846-1 Security update for go1.20
This update for go1.20 fixes the following issues: go was updated to version 1.20.6 bsc1206346: - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http bsc1213229...
SUSE-SU-2023:2813-1 Security update for skopeo
This update of skopeo fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
SUSE-SU-2023:2261-2 Security update for terraform-provider-null
This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...
AZL-27140 CVE-2023-29404 affecting package golang for versions less than 1.20.7-1
The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. The arguments for a...