16911 matches found
Important: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions containing deeply nested...
ALSA-2024:6913 Important: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion...
go-toolset:ol8 security update
delve 1.21.2-4.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.21.2-4 - Skip tests in %check due to incompatible Go version in buildroot temporary. - Resolves: RHEL-59518 golang 1.21.13-2 - Rebuild Go with CVE Fixes - Remove fix-memleak-setupRSA.patch exists upstream - Resolves:...
ALSA-2024:6908 Important: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions containing deeply nested...
ROS-20240923-06
Vulnerability of net/http and net/http2 libraries of Go programming language in terms of implementation of the HTTP/2 protocol is related to uncontrolled resource consumption as a result of incorrect determination of the termination of HTTP/2 is related to uncontrolled resource consumption as a...
SUSE SLES15: kubernetes1.25-apiserver / kubernetes1.25-client / etc (SUSE-SU-2024:3344-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3344-1 advisory. - CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. bsc1229869 -...
SUSE SLES15: kubernetes1.24-apiserver / kubernetes1.24-client / etc (SUSE-SU-2024:3342-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3342-1 advisory. - CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. bsc1229869 -...
SUSE-SU-2024:3341-1 Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. bsc1194400 - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. bsc1211630 - CVE-2023-2728: bypass of...
CVE-2024-8986 Information Leakage in grafana-plugin-sdk-go
The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin. If credentials are included in the repository URI for instance, to allow for fetching of private...
Security Bulletin: Vulnerabilities in Golang Go affect IBM watsonx.data
Summary Golang Go could allow a remote attacker to execute arbitrary code on the system and is vulnerable to HTML injection. These can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caus...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.15.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Security Bulletin: Vulnerabilities in Go affects IBM watsonx.data
Summary Vulnerabilities in the Go package could allow a remote attacker to either inject malicious HTML code into a template causing an HTML injection or execute arbritray code on the system. These vulnerabilities may impact watsonx.data. Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Go...
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
A flaw was found in the Go language standard library net/netip. The method Is IsPrivate, IsPublic, etc doesn't behave properly when working with IPv6 mapped to IPv4 addresses. The unexpected behavior can lead to integrity and confidentiality issues, specifically when these methods are used to...
golang: net: malformed DNS message can cause infinite loop
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...
RHSA-2023:3923 Red Hat Security Advisory: go-toolset and golang security update
Bulletin has no description...
RHSA-2023:3922 Red Hat Security Advisory: go-toolset:rhel8 security update
Bulletin has no description...
RHSA-2023:3920 Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update
Bulletin has no description...
RHSA-2019:1519 Red Hat Security Advisory: go-toolset:rhel8 security update
Bulletin has no description...