[SECURITY] Fedora 33 Update: golang-1.15.7-1.fc33

The Go Programming Language...

Fedora: Security Advisory for golang (FEDORA-2021-e435a8bb88)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: IBM MQ certified container software is vulnerable to multiple vulnerabilities within Golang Go (CVE-2020-28367, CVE-2020-28366)

Summary Multiple injection vulnerabilities were discovered in golang which is used to create the control programs used by IBM MQ certified containers, and the IBM MQ Operator. Vulnerability Details CVEID: CVE-2020-28367 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary cod...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-1144)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : go-toolset:rhel8 (CESA-2020:0329)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0329 advisory. - golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling CVE-2019-16276 - golang: invalid public key causes...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-1144)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.CVE-2020-28366 - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument...

CentOS 8 : go-toolset:rhel8 (CESA-2020:3665)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3665 advisory. - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash CVE-2020-14040 - golang: data race in certain...

CentOS 8 : go-toolset:rhel8 (CESA-2019:1519)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:1519 advisory. - golang: CRLF injection in net/http CVE-2019-9741 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CentOS 8 : go-toolset:rhel8 (CESA-2019:3433)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3433 advisory. - golang: malformed hosts in URLs leads to authorization bypass CVE-2019-14809 Note that Nessus has not tested for this issue but has instead relied only on the...

Google Golang Security Vulnerability

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

Insecure Cryptographic Functions

crypto/elliptic in github.com/golang/go uses Insecure Cryptographic Functions. The P224 Curve may generate incorrect outputs, including returning invalid points from ScalarMult...

CVE-2021-3115

A flaw was found in golang: cmd/go, in which Go can execute arbitrary commands at build time when cgo is in use on Windows OS. On Linux/Unix, only users who have "." listed explicitly in their PATH variable are affected. The highest threat from this vulnerability is to data confidentiality and...

Fedora 33 : golang-github-buger-jsonparser (2021-5676f1be7d)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5676f1be7d advisory. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note...

Security fix for the ALT Linux 10 package golang version 1.15.7-alt1

Jan. 20, 2021 Alexey Shabalin 1.15.7-alt1 - New version 1.15.7. - Fixes: + CVE-2021-3114 + CVE-2021-3115...

Security fix for the ALT Linux 9 package golang version 1.15.7-alt1

Jan. 20, 2021 Alexey Shabalin 1.15.7-alt1 - New version 1.15.7. - Fixes: + CVE-2021-3114 + CVE-2021-3115...

Fedora 32 : golang-github-buger-jsonparser (2021-b670727349)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b670727349 advisory. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note...

Debian DLA-2527-1 : snapd security update

golang-go.crypto was recently updated with a fix for CVE-2019-11840. This in turn requires all packages that use the affected code to be recompiled in order to pick up the security fix. CVE-2019-11840 An issue was discovered in supplementary Go cryptography libraries, aka...

Moderate: Red Hat Security Advisory: OpenShift Virtualization 2.5.3 security and bug fix update

Red Hat OpenShift Virtualization release 2.5.3 is now available with updates to packages and images that fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-1073)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...