Red Hat Security Advisory

RHSA-2023:2193

butane security, bug fix, and enhancement update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) butane-0.16.0-1.el9

Fixes 2 records

TI-2022-13904 CVE-2022-32189 · GHSA-3rm2-w8f7-h7rf

Panic when decoding Float and Rat types in math/big

MEDIUM 44

A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02781 Published 2022-08-09 Partial fix · 1.17.13, 1.18.5

TI-2022-10644 CVE-2022-27664 · GHSA-69cg-p879-7622

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of…

LOW 39

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03487 Published 2022-09-06 Partial fix · 0.0.0-20220906165146-f3363e06e74c