CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

SUSE-SU-2023:2288-1 Security update for kubernetes1.18

This update of kubernetes1.18 fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

SUSE-SU-2023:2254-1 Security update for containerd

This update for containerd fixes the following issues: - Rebuild containerd with a current version of go to catch up on bugfixes and security fixes bsc1210298...

SUSE-SU-2023:2221-1 Security update for conmon

This update of conmon fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

SUSE-SU-2023:2127-1 Security update for go1.19

This update for go1.19 fixes the following issues: Update to 1.19.9 bnc1200441: - CVE-2023-24539: fixed an improper sanitization of CSS values bnc1211029. - CVE-2023-24540: fixed an improper handling of JavaScript whitespace bnc1211030. - CVE-2023-29400: fixed an improper handling of empty HTML...

SUSE-SU-2023:1796-2 Security update for conmon

This update for conmon fixes the following issues: - rebuild against supported go 1.19 bsc1209307 - no functional changes...

PT-2023-36139 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue concerns a rebuild of conmon against a supported version of Go, specifically Go 1.19. There are no functional changes in this update. Recommendations: At the moment, there is no...

SUSE-SU-2023:1901-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.11.2: choredeps: bump github.com/rubenv/sql-migrate from 1.2.0 to 1.3.1 the linter varcheck and deadcode are deprecated since v1.49.0 fix template --output-dir issue build against a supported go version: go1.19 bsc1209670...

SUSE-SU-2023:1851-1 Security update for container-suseconnect

This update for container-suseconnect fixes the following issue: - rebuilt against current go version...

PT-2023-36142 · Suse · Container-Suseconnect

Name of the Vulnerable Software and Affected Versions: container-suseconnect affected versions not specified Description: The issue is related to the container-suseconnect being rebuilt against the current go version. Recommendations: At the moment, there is no information about a newer version...

SUSE-SU-2023:1815-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: - rebuilt using go1.19.7 to fix bugs and security issues...

SUSE-SU-2023:1796-1 Security update for conmon

This update for conmon fixes the following issues: - rebuild against supported go 1.19 bsc1209307 - no functional changes...

Allocation of Resources Without Limits or Throttling

Overview std/net/textproto is a Go standard library package std/net/textproto Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. Go Vulnerability Report: HTTP and MIME header parsing can allocate large amounts of memory, even when parsing sma...

SUSE CVE-2020-7919

Go before 1.12.16 and 1.13.x before 1.13.7 and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go allows attacks on clients resulting in a panic via a malformed X.509 certificate...

SUSE CVE-2021-41772

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field...

SUSE CVE-2022-27536

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic...

Russian Hackers Using Graphiron Malware to Steal Data from Ukraine

A Russia-linked threat actor has been observed deploying a new information-stealing malware in cyber attacks targeting Ukraine. Dubbed Graphiron by Broadcom-owned Symantec, the malware is the handiwork of an espionage group known as Nodaria, which is tracked by the Computer Emergency Response Tea...

SUSE-SU-2022:4054-1 Security update for go1.19

This update for go1.19 fixes the following issues: Update to go 1.19.3 released 2022-11-01 bsc1200441: Security fixes: - CVE-2022-41716: Fixed unsanitized NUL in environment variables in syscalls, os/exec go56327 bsc1204941. Bugfixes: - runtime: lock count' fatal error when cgo is enabled go56308...

AZL-11129 CVE-2022-2880 affecting package golang for versions less than 1.19.10-1

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...

SUSE-SU-2022:3326-1 Security update for go1.19

This update for go1.19 fixes the following issues: Update to go version 1.19.1 bsc1200441: - CVE-2022-27664: Fixed DoS in net/http caused by mishandled server errors after sending GOAWAY bsc1203185. - CVE-2022-32190: Fixed missing stripping of relative path components in net/url JoinPath bsc12031...