golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

RHEL 8 : Release of openshift-serverless-clients kn 1.33.0 security update & s (Important) (RHSA-2024:4023)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4023 advisory. Red Hat OpenShift Serverless Client kn 1.33.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.33.0. The kn CLI is delivered a...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

Pakistani Hackers Use DISGOMOJI Malware in Indian Government Cyber Attacks

A suspected Pakistan-based threat actor has been linked to a cyber espionage campaign targeting Indian government entities in 2024. Cybersecurity company Volexity is tracking the activity under the moniker UTA0137, noting the adversary's exclusive use of a malware called DISGOMOJI that's written ...

OPENSUSE-SU-2024:13109-1 golang-github-lusitaniae-apache_exporter-1.0.0-1.1 on GA media

These are all security issues fixed in the golang-github-lusitaniae-apacheexporter-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13599-1 golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.26.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13604-1 golang-github-prometheus-prometheus-2.48.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.48.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13865-1 golang-github-v2fly-v2ray-core-5.15.1-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12650-1 golang-github-prometheus-prometheus-2.41.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10814-1 golang-github-prometheus-prometheus-2.27.1-4.2 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13143-1 golang-github-prometheus-prometheus-2.46.0-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.46.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12637-1 golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: Vulnerabilities in Golang Go and RabbitMQ Java Client might affect IBM Storage Copy Data Management

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Golang Go and RabbitMQ Java Client. Vulnerabilities include cause a denial of service condition and cause a memory overflow on the system as described by the CVE in the "Vulnerability Details" section. CVE-2023-45288,...

Security Bulletin: Multiple vulnerabilities in Golang Go affect IBM Storage Copy Data Management components that leverage Go

Summary Multiple vulnerabilities in Golang Go affect IBM Storage Copy Data Management components that leverage Go essentially VADP 'VM' backup. Vulnerabilities including execution of arbitrary code on the system, remote attacker can cause an infinite loop, as described by the CVEs in the...

buildah security and bug fix update

An update is available for buildah. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

golang bug fix update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Bug Fixes:...

RLSA-2024:3830 Moderate: gvisor-tap-vsock security and bug fix update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: golang:...

podman security and bug fix update

An update is available for podman. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

RLSA-2024:3259 Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 golang: net/http/cookiejar: incorrect forwarding of sensitive headers and...

go-toolset:rhel8 security update

An update is available for module.golang, go-toolset, delve, module.go-toolset, module.delve, golang. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset...