Fedora 29 : golang-googlecode-go-crypto (2019-117e425677)

Bump to commit b7391e95e576cacdcdd422573063bc057239113d Security fix for 1691529 and 1691530. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : golang-googlecode-go-crypto (2019-3f561ba0be)

Bump to commit b7391e95e576cacdcdd422573063bc057239113d Security fix for 1691529 and 1691530. ---- Bump to upstream a49355c7e3f8fe157a85be2f77e6e269a0f89602 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

[SECURITY] [DLA 1749-1] golang security update

Package : golang Version : 2:1.3.3-1+deb8u2 CVE ID : CVE-2019-9741 Debian Bug : 924630 It was discovered that there was a CRLF injection attack in the Go programming language runtime library. Passing \r\n to http.NewRequest could allow execution of arbitrary HTTP headers or Redis commands. For...

DLA-1749-1 golang - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc (openSUSE-SU-2019:1079-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc (important)

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc Announcement ID: openSUSE-SU-2019:1079-1 Rating: important References: 1001161 1048046 1051429 1112980 1114832 1118897 1118898 1118899 1121412 1121967 1124308 Cross-References:...

Fedora Update for golang-googlecode-net FEDORA-2019-07d447a1d3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : containerd / docker and go (openSUSE-2019-1044)

This update for containerd, docker and go fixes the following issues : containerd and docker : - Add backport for building containerd bsc1102522, bsc1113313 - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. bsc1102522 - Enable seccomp support fate325877 - Update to...

[SECURITY] Fedora 29 Update: golang-googlecode-net-0-0.49.20190302git16b79f2.fc29

Supplementary Go networking libraries...

[SECURITY] Fedora 28 Update: golang-googlecode-net-0-0.48.20190302git16b79f2.fc28

Supplementary Go networking libraries...

Fedora 28 : golang-googlecode-net (2019-07d447a1d3)

Bump to commit 16b79f2e4e95ea23b2bf9903c9809ff7b013ce85 Security fixes for CVE-2018-17143, CVE-2018-17142, CVE-2018-17075, CVE-2018-17846, CVE-2018-17847, CVE-2018-17848 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Exploit for Path Traversal in Rubyonrails Rails

CVE-2019-5418-Scanner A multi-threaded Golang scanner to ident...

Amazon Linux AMI : golang (ALAS-2019-1172)

Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks. CVE-2019-6486 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazo...

DLL Injection

github.com/golang/sys is vulnerable to DLL injection. The vulnerability is possible because it does not properly load system DLLs using an absolute path name, allowing an attacker with certain privileges to perform inject arbitrary DLLs into the application...

AZL-78966 CVE-2019-9634 affecting package golang 1.25.7-1

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

Amazon Linux 2 : golang (ALAS-2019-1172)

Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks.CVE-2019-6486 Note: This CVE is also fixed in golang-1.11.3-2.amzn2.0.2 in the golang1.11 extras repository. C Tenable Network...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-295)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...

Medium: golang

Issue Overview: Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks. CVE-2019-6486 Affected Packages: golang Issue Correction: Run yum update golang or yum update --advisory...

Medium: golang

Issue Overview: Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks.CVE-2019-6486 Note: This CVE is also fixed in golang-1.11.3-2.amzn2.0.2 in the golang1.11 extras repository...