TI-2020-17201 CVE-2020-28362 · GHSA-gff4-9rfx-4pcw
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Priority LOW 39
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
RHSA-2020:5333
go-toolset-1.14-golang security update
Released 2020-12-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.14-1.14.12-1.el7_9, go-toolset-1.14-build-1.14.12-1.el7_9, go-toolset-1.14-golang-1.14.12-1.el7_9 +7
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.14-1.14.12-1.el7_9, go-toolset-1.14-build-1.14.12-1.el7_9, go-toolset-1.14-golang-1.14.12-1.el7_9 +7
Fixes 3 records
TI-2020-17205 CVE-2020-28367 · GHSA-827f-m9xx-4cfw
Arbitrary code execution via the go command with cgo in cmd/go
Priority LOW 37
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.
TI-2020-17204 CVE-2020-28366 · GHSA-mwfg-6wv9-379f
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
Priority LOW 37
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.