[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250363

 
 

909

 
 

196124

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RLSA-2023:0446 --- golang

ID: oval:org.secpod.oval:def:4501209Date: (C)2023-03-13   (M)2024-02-26
Class: PATCHFamily: unix




Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix: * golang: archive/tar: unbounded memory consumption when reading headers * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters * golang: regexp/syntax: limit memory used by parsing regexps For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix: * Internal linking fails on ppc64le * crypto testcases fail on golang on s390x [Rocky Linux-8]

Platform:
Rocky Linux 8
Product:
golang
delve
go-toolset
Reference:
RLSA-2023:0446
CVE-2022-2879
CVE-2022-2880
CVE-2022-41715
CVE    3
CVE-2022-2880
CVE-2022-41715
CVE-2022-2879
CPE    3
cpe:/a:golang:golang
cpe:/a:go-delve:golang
cpe:/a:golang:go-toolset

© SecPod Technologies