Red Hat Security AdvisoryRHSA-2021:5160
go-toolset:rhel8 security and bug fix update
Released 2021-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.6.0-1.module+el8.5.0+10379+d6b83bd0.src::go-toolset:rhel8, delve-1.6.0-1.module+el8.5.0+10379+d6b83bd0.x86_64::go-toolset:rhel8, go-toolset-1.16.12-1.module+el8.5.0+13637+960c7771.aarch64::go-toolset:rhel8 +18
Fixes 2 records
Priority MEDIUM 40
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04254 · Published 2022-01-01 · Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400
Priority LOW 26
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustio…
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.01997 · Published 2022-01-01 · Partial fix CWE-404
