TI-2020-17201 CVE-2020-28362 · GHSA-gff4-9rfx-4pcw
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Priority LOW 39
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
RHSA-2020:5493
go-toolset:rhel8 security update
Released 2020-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.4.1-1.module+el8.3.0+7840+63dfb1ed.src::go-toolset:rhel8, delve-1.4.1-1.module+el8.3.0+7840+63dfb1ed.x86_64::go-toolset:rhel8, go-toolset-1.14.12-1.module+el8.3.0+8784+380394dc.aarch64::go-toolset:rhel8 +18
Fixes 4 records
TI-2020-17205 CVE-2020-28367 · GHSA-827f-m9xx-4cfw
Arbitrary code execution via the go command with cgo in cmd/go
Priority LOW 37
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.
TI-2020-17204 CVE-2020-28366 · GHSA-mwfg-6wv9-379f
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
Priority LOW 37
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
TI-2020-15035 CVE-2020-24553 · GHSA-pfr3-j9r8-5229
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for…
Priority LOW 34
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.