Red Hat Security AdvisoryRHSA-2022:5337
go-toolset:rhel8 security and bug fix update
Released 2022-06-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.10-1.module+el8.6.0+15486+6d4da7db.aarch64::go-toolset:rhel8 +18
Fixes 4 records
Priority MEDIUM 45
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0995 · Published 2022-04-20 · Partial fix CWE-674
Priority MEDIUM 40
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0416 · Published 2022-04-20 · Partial fix
Priority LOW 39
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03228 · Published 2022-03-05 · Partial fix CWE-674
Priority LOW 29
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02951 · Published 2022-06-22 · Partial fix · 0.0.0-20220412211240-33da011f77ad CWE-269
