Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2802)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-2802)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected ty...

openSUSE 15 Security Update : go1.16 (openSUSE-SU-2021:4169-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:4169-1 advisory. - golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 - golang: syscall: don't close fd 0 on ForkExec error...

openSUSE 15 Security Update : go1.17 (openSUSE-SU-2021:4186-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:4186-1 advisory. - golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 - golang: syscall: don't close fd 0 on ForkExec error...

Updated thrift/golang-github-apache-thrift packages fix security vulnerability

Malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Golang’s net/http (CVE-2021-44716)

Summary A denial of service vulnerability was reported in Golang’s net/http package. This vulnerability, CVE-2021-44716, was fixed in conjunction with another security issue in Go releases 1.16.12 and 1.17.5, and subsequently addressed with new releases of the affected HashiCorp products listed...

Security Bulletin: IBM Event Streams affected by potential buffer overflow in Golang (CVE-2021-38297)

Summary IBM Event Streams affected by vulnerabilitiy in Golang which may result in a buffer overflow CVE-2021-38297 Vulnerability Details CVEID: CVE-2021-38297 DESCRIPTION: Golang Go is vulnerable to a buffer overflow, caused by improper bounds checking when invoking functions from WASM modules. ...

Security Bulletin: IBM Event Streams affected by multiple vulnerabilities in Golang

Summary IBM Event Streams affected by multiple vulnerabilities in Golang Vulnerability Details CVEID: CVE-2021-33195 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by not following RFC 1035 rules in the LookupCNAME, LookupSRV, LookupMX,...

Security Bulletin: IBM App Connect Enterprise Certified Container operator may be affected by CVE-2020-29510

Summary The operator for IBM App Connect Enterprise Certified Container may be affected by CVE-2020-29510 if the operator is made to process XML Vulnerability Details CVEID: CVE-2020-29510 DESCRIPTION: Golang Go could allow a remote attacker to bypass security restrictions, caused by the failure ...

Fedora: Security Advisory for golang (FEDORA-2021-2ef35beebf)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang (FEDORA-2021-2b2dd1b5a7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-41771 affecting package golang 1.16.9-1

CVE-2021-41771 affecting package golang 1.16.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-41772 affecting package golang 1.16.9-1

CVE-2021-41772 affecting package golang 1.16.9-1. An upgraded version of the package is available that resolves this issue...

golang: archive/zip: Reader.Open panics on empty string

A vulnerability was found in archive/zip of the Go standard library. Applications written in Go where Reader.Open the API implementing io/fs.FS introduced in Go 1.16 can panic when parsing a crafted ZIP archive containing completely invalid names or an empty filename argument...

Important: Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update

An update for go-toolset-1.16 and go-toolset-1.16-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

[SECURITY] Fedora 35 Update: golang-1.16.11-1.fc35

The Go Programming Language...

[SECURITY] Fedora 34 Update: golang-1.16.11-1.fc34

The Go Programming Language...

RHEL 7 : go-toolset-1.16 and go-toolset-1.16-golang (RHSA-2021:5176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5176 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http:...

CentOS 8 : go-toolset:rhel8 (CESA-2021:5160)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:5160 advisory. - golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 - golang: syscall: don't close fd 0 on ForkExec error CVE-2021-44717...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2021-5160)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-5160 advisory. golang 1.16.12-1 - Rebase to Go 1.16.12 - Resolves: rhbz2031125 go-toolset 1.16.12-1 - Rebase to Go 1.16.12 - Resolves: rhbz2031125 Tenable has extract...