[SECURITY] Fedora 35 Update: golang-github-aliyun-cli-3.0.104-4.s20220118git031f9f2.fc35

Alibaba Cloud Aliyun CLI...

[SECURITY] Fedora 35 Update: golang-gioui-0-8.20201225git18d4dbf.fc35

Immediate mode GUI programs in Go for Android, iOS, macOS, Linux, FreeBSD, OpenBSD, Windows, and WebAssembly experimental. See the project page gioui. org for documentation and more information...

[SECURITY] Fedora 35 Update: golang-etcd-bbolt-1.3.6-4.fc35

Package Bbolt implements a low-level key/value store in pure Go. It supports fully serializable transactions, ACID semantics, and lock-free MVCC with multiple readers and a single writer. Bolt can be used for projects that want a simple data store without the need to add large dependencies such a...

[SECURITY] Fedora 35 Update: golang-github-a8m-tree-0-0.16.20210725gitce3525c.fc35

An implementation of the Unix tree command written in Go, that can be used programmatically...

[SECURITY] Fedora 35 Update: golang-github-a8m-envsubst-1.3.0-2.fc35

Go package for substituting environment variables...

[SECURITY] Fedora 35 Update: golang-bug-serial-1-1.3.3-2.fc35

A cross-platform serial library for Golang...

[SECURITY] Fedora 35 Update: golang-ariga-atlas-0.3.6-3.fc35

A database toolkit...

[SECURITY] Fedora 35 Update: golang-contrib-opencensus-resource-0.1.2-7.fc35

Go packages for auto discovery of resource information in various environment s. The resourcekeys packages defines well-known type and label key strings that are used by the other packages...

[SECURITY] Fedora 35 Update: godoctor-0.6-12.fc35

Go Doctor - The Golang Refactoring Engine...

[SECURITY] Fedora 35 Update: goaltdns-0-0.7.20200627git2b3e8a3.fc35

A permutation generation tool written in Golang...

Updated golang packages fix security vulnerability

net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...

MGASA-2022-0262 Updated golang packages fix security vulnerability

net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...

Fedora: Security Advisory for golang (FEDORA-2022-f6d84fa837)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-78962 CVE-2022-30634 affecting package golang 1.25.7-1

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 32 - 1 bytes...

CVE-2022-30635

A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

CVE-2022-30633

A flaw was found in golang. Calling Unmarshal on an XML document into a Go struct, which has a nested field that uses the "any" field tag, can cause a panic due to stack exhaustion...

CVE-2022-1962

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

CVE-2022-30632

A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability...

CVE-2022-1705

A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid...

CVE-2022-30631

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...