EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-2327)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-2358)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-2414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2025-2386)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath '', '.', a...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2025-2414)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath '', '.', a...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-2327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-2386)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1762868093 grafana-pcp: Fix of CVE-2024-34156

rebuild with golang = 1.22.5-1.el92.tuxcare.els7 - CVE-2024-34156: fix stack exhaustion in Decoder.Decode in golang...

Security Bulletin: A vulnerability in Go affects IBM Robotic Process Automation for Cloud Pak and may result in request smuggling (CVE-2025-22871).

Summary A vulnerability in Go affects IBM Robotic Process Automation for Cloud Pak and may result in request smuggling.. Go is used by IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerability. Vulnerability...

Fedora 42 : golang-github-openprinting-ipp-usb (2025-d9921d4ed5)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9921d4ed5 advisory. Rebuild with the latest golang in repos Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 41 : golang-github-openprinting-ipp-usb (2025-9d12a32bce)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9d12a32bce advisory. Rebuild with the latest golang in repos Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CLSA-2025-1762539123 git-lfs: Fix of 6 CVEs

Rebuild with golang = 1.22.5.tuxcare.els7 to fix CVE-2024-24790, CVE-2024-34156, CVE-2023-45288, CVE-2023-39322, CVE-2023-39321, CVE-2024-24788...

Fedora 43 : apptainer (2025-061f320514)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-061f320514 advisory. Update to upstream 1.4.4. This was built with golang 1.25.3 which fixes CVE-2025-61723, CVE-2025-61725, CVE-2025-58183, CVE-2025-58185,...

Fedora 43 : buildah (2025-8f97b687c8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8f97b687c8 advisory. Rebuild for security fixes in golang. ---- bump to v1.42.0 Tenable has extracted the preceding description block directly from the Fedora security...

Mageia: Security Advisory (MGASA-2025-0256)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated golang packages fix security vulnerabilities

Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...

RHSA-2025:19397 Red Hat Security Advisory: golang security update

Bulletin has no description...

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.

Summary IBM Maximo Application Suite uses "form-data 4.0.0, org.apache.cxfcxf-core 3.6.7 , net/http/internal v1.24.1, braces 3.0.2 , cross-spawn 7.0.3 , crypto/x509 1.24.1 1.24.3 , github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5 v4.5.0 v5.2.1 , httpd 2.4.37 , setuptools 78.0.2 75.8.0 ,...

Moderate: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 9 : golang (RHSA-2025:19397)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19397 advisory. The golang packages provide the Go programming language compiler. Security Fixes: database/sql: Postgres Scan Race Condition CVE-2025-47907 For more...