GO-2023-1841 Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. The arguments for a...

CVE-2023-29405

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. Flags containing...

SUSE CVE-2023-29405

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. Flags containing...

PT-2023-3868

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description The issue is related to the Go programming language's cgo extension, which may execute arbitrary code at build time when using cgo. This can occur when running "go get" on a malicious module or wh...

PT-2023-3869 · Go +11 · Go +11

Name of the Vulnerable Software and Affected Versions: Go versions prior to the fixed version Description: The issue is related to the incorrect handling of code generation when processing linker flags from the CgoLDFLAGS directive, allowing a remote attacker to execute arbitrary code. This can...

go -- multiple vulnerabilities

The Go project reports: crypto/tls: restrict RSA keys in certificates to = 8192 bits Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. Limit this by restricting the size of RSA keys transmitted during handshakes to = 8192...

python39:3.9 and python39-devel:3.9 security update

Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 0.29.21-4 - Drop build dependency on coverage 0.29.21-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 0.29.21-2 - Re-enable tests. 0.29.21-1 - 0.29.21 scipy 1.5.4-3 - Specify LDFLAGS...

dpdk security, bug fix, and enhancement update

19.11-4 - Remove MLX4,5 glue libraries since RHEL 8 ships the correct libibverbs library. 1805140 19.11-3 - Remove /usr/share/dpdk/mk/exec-env/bsd,linuxapp symlinks 1773889 19.11-2 - Add pretrans to handle /usr/share/dpdk/mk/exec-env/bsd,linuxapp 1773889 19.11-1 - Rebase to 19.11 1773889 - Remove...

glib2 security, bug fix, and enhancement update

2.56.4-7 - Backport patch for CVE-2019-12450 Resolves: 1722101 2.56.4-5 - Backport glib2 change needed for accountsservice dbus codegen fix Resolves: 1713081 2.56.4-4 - Back GHmac with GnuTLS for FIPS - Resolves: 1630260 2.56.4-3 - Backport per-desktop overrides - Resolves: 1715951 2.56.4-2 - Add...

libjpeg-turbo security update

1.5.3-10 - Fix CVE-2018-14498 1687477 1.5.3-9 - Fix LDFLAGS 1688397 1.5.3-8 - Support running with Intel CET 1688397...

Fedora 27 : php (2018-25100b492c)

PHP version 7.1.22 13 Sep 2018 Core: - Fixed bug php76754 parent private constant in extends class memory leak. Laruence - Fixed bug php72443 Generate enabled extension. petk Apache2: - Fixed bug php76582 Apache bucket brigade sometimes becomes invalid. stas Bz2: - Fixed arginfo for bzcompress...

Fedora 23 : sundials-2.6.2-11.fc23 (2015-7ebe03e30b)

sundials-2.6.2-11.fc23 - Fixes for EPEL7 - Set mpif77 only for OpenMPI 1.17 Fedora - Set LDFLAGS for EPEL7 - Hardened builds on 1.17 Fedora - Set LDFLAGS for EPEL7 - Hardened builds on 1.17 Fedora - Set LDFLAGS for EPEL7 - Hardened builds on 1.17 Fedora - Set LDFLAGS for EPEL7 - Hardened builds o...

vixie-cron security, bug fix, and enhancement update

4:4.1-81 - 455664 adoptions of crontab orphans, forgot add buffer for list of orphans - Related: rhbz455664 4:4.1-80 - 654961 crond process ignores the changes of user's home directory needs bigger changes of code. The fix wasn't applied, detail in comment11. - Related: rhbz249512 4:4.1-79 -...