CVE-2020-14039

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

Azure Linux 3.0 Security Update: golang / python-tensorboard (CVE-2020-14039)

The version of golang / python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14039 advisory. - In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify May lack a check on t...

CVE-2020-14039 affecting package python-tensorboard for versions less than 2.16.2-2

CVE-2020-14039 affecting package python-tensorboard for versions less than 2.16.2-2. An upgraded version of the package is available that resolves this issue...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2288)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14039 affecting package golang 1.13.11-

CVE-2020-14039 affecting package golang 1.13.11-. An upgraded version of the package is available that resolves this issue...

SUSE: Security Advisory (SUSE-SU-2020:2562-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for go1.14 (openSUSE-SU-2020:1407-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2020:2562-1)

This update for go1.14 fixes the following issues : go1.14 was updated to version 1.14.7 CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. go1.14.6 released 2020-07-16 includes fixes to the go command, the compiler, the linker, vet, and...

Security Bulletin: Golang Vulnerabilities in IBM Cloud CLI 1.1.0 or earlier

Summary Golang vulnerabilities were found, which could allow an attacker to bypass security restrictions under some circumstances. IBM Cloud CLI version 1.1.0 or earlier is impacted by these vulnerabilities. Vulnerability Details CVEID: CVE-2020-15586 DESCRIPTION: Golang Go is vulnerable to a...

openSUSE Security Update : go1.13 (openSUSE-2020-1095)

This update for go1.13 fixes the following issues : - go1.13.14 released 2020/07/16 includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc1149259 go1.13 release tracking - go39925 net/http: panic on misformed If-None-Match Header with http.ServeContent ...

openSUSE Security Update : go1.13 (openSUSE-2020-1087)

This update for go1.13 fixes the following issues : - go1.13.14 released 2020/07/16 includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc1149259 go1.13 release tracking - go39925 net/http: panic on misformed If-None-Match Header with http.ServeContent ...

openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1095-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security fix for the ALT Linux 9 package golang version 1.14.6-alt1

1.14.6-alt1 built July 27, 2020 Alexey Shabalin in task 255353 July 23, 2020 Alexey Shabalin - New version 1.14.6. Fixes: CVE-2020-15586, CVE-2020-14039...

openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for go1.13 (important)

openSUSE Security Update: Security update for go1.13 Announcement ID: openSUSE-SU-2020:1095-1 Rating: important References: 1149259 1169832 1172868 1174153 1174191 Cross-References: CVE-2020-14039 CVE-2020-15586 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and h...

CVE-2020-14039

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

AZL-79080 CVE-2020-14039 affecting package golang 1.25.7-1

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

BELL-CVE-2020-14039 CVE-2020-14039 does not affect BellSoft software

Bulletin has no description...

CVE-2020-14039

CVE-2020-14039 : In Go, before 1.13.13 and in 1.14.x before 1.14.5, Certificate.Verify may fail to enforce VerifyOptions.KeyUsages EKU when Roots is nil on Windows, yielding incomplete X.509 certificate verification and potential trust bypass. Root cause: missing EKU checks during verification. A...