Red Hat Security AdvisoryRHSA-2019:3433
go-toolset:rhel8 security, bug fix, and enhancement update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) go-toolset-1.12.8-1.module+el8.1.0+4089+be929cf8.aarch64::go-toolset:rhel8, go-toolset-1.12.8-1.module+el8.1.0+4089+be929cf8.ppc64le::go-toolset:rhel8, go-toolset-1.12.8-1.module+el8.1.0+4089+be929cf8.s390x::go-toolset:rhel8 +16
Fixes 1 record
Priority MEDIUM 53
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08359 · Published 2019-08-13 · Partial fix
