TI-2022-02669 CVE-2022-2879 · GHSA-fqpx-62jv-7r6r
Unbounded memory consumption when reading headers in archive/tar
Priority LOW 37
Reader.Read does not set a limit on the maximum size of file headers.
RHSA-2023:0445
go-toolset-1.18 security update
Released 2023-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.18-1.18.9-1.el7_9, go-toolset-1.18-build-1.18.9-1.el7_9, go-toolset-1.18-golang-1.18.9-1.el7_9 +8
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.18-1.18.9-1.el7_9, go-toolset-1.18-build-1.18.9-1.el7_9, go-toolset-1.18-golang-1.18.9-1.el7_9 +8
Fixes 3 records
TI-2022-20107 CVE-2022-41715 · GHSA-5wvm-rxcf-6cg8
Memory exhaustion when compiling regular expressions in regexp/syntax
Priority LOW 36
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service.
TI-2022-02670 CVE-2022-2880 · GHSA-m3hq-grv6-h853
Incorrect sanitization of forwarded query parameters in net/http/httputil
Priority LOW 36
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http.