Security Bulletin: IBM Event Streams affected by potential buffer overflow in Golang (CVE-2021-38297)

Summary IBM Event Streams affected by vulnerabilitiy in Golang which may result in a buffer overflow CVE-2021-38297 Vulnerability Details CVEID: CVE-2021-38297 DESCRIPTION: Golang Go is vulnerable to a buffer overflow, caused by improper bounds checking when invoking functions from WASM modules. ...

Security Bulletin: IBM Event Streams affected by multiple vulnerabilities in Golang

Summary IBM Event Streams affected by multiple vulnerabilities in Golang Vulnerability Details CVEID: CVE-2021-33195 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by not following RFC 1035 rules in the LookupCNAME, LookupSRV, LookupMX,...

Security Bulletin: IBM App Connect Enterprise Certified Container operator may be affected by CVE-2020-29510

Summary The operator for IBM App Connect Enterprise Certified Container may be affected by CVE-2020-29510 if the operator is made to process XML Vulnerability Details CVEID: CVE-2020-29510 DESCRIPTION: Golang Go could allow a remote attacker to bypass security restrictions, caused by the failure ...

Fedora: Security Advisory for golang (FEDORA-2021-2ef35beebf)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang (FEDORA-2021-2b2dd1b5a7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-41771 affecting package golang 1.16.9-1

CVE-2021-41771 affecting package golang 1.16.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-41772 affecting package golang 1.16.9-1

CVE-2021-41772 affecting package golang 1.16.9-1. An upgraded version of the package is available that resolves this issue...

golang: archive/zip: Reader.Open panics on empty string

A vulnerability was found in archive/zip of the Go standard library. Applications written in Go where Reader.Open the API implementing io/fs.FS introduced in Go 1.16 can panic when parsing a crafted ZIP archive containing completely invalid names or an empty filename argument...

Important: Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update

An update for go-toolset-1.16 and go-toolset-1.16-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

[SECURITY] Fedora 35 Update: golang-1.16.11-1.fc35

The Go Programming Language...

[SECURITY] Fedora 34 Update: golang-1.16.11-1.fc34

The Go Programming Language...

RHEL 7 : go-toolset-1.16 and go-toolset-1.16-golang (RHSA-2021:5176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5176 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http:...

CentOS 8 : go-toolset:rhel8 (CESA-2021:5160)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:5160 advisory. - golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 - golang: syscall: don't close fd 0 on ForkExec error CVE-2021-44717...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2021-5160)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-5160 advisory. golang 1.16.12-1 - Rebase to Go 1.16.12 - Resolves: rhbz2031125 go-toolset 1.16.12-1 - Rebase to Go 1.16.12 - Resolves: rhbz2031125 Tenable has extract...

Important: Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

go-toolset:rhel8 security and bug fix update

An update is available for delve, golang, go-toolset. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming language tools and...

RLSA-2021:5160 Important: go-toolset:rhel8 security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 golang: syscall: don't close fd 0 on ForkExec error CVE-2021-44717 For more details about the...

Important: go-toolset:rhel8 security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 golang: syscall: don't close fd 0 on ForkExec error CVE-2021-44717 For more details about the...

RHEL 8 : go-toolset:rhel8 (RHSA-2021:5160)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5160 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http:...

Denial Of Service (DoS)

golang is vulnerable to denial of service. The vulnerability exists due to an uncontrolled resource consumption flaw in golang's net/http library in the canonicalHeader function which allows an attacker to submits maliciously crafted requests to applications linked with net/http's http2...