Red Hat Security AdvisoryRHSA-2024:0887
go-toolset:rhel8 security update
Released 2024-02-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.20.2-1.module+el8.9.0+18926+5193682d.src::go-toolset:rhel8, delve-1.20.2-1.module+el8.9.0+18926+5193682d.x86_64::go-toolset:rhel8, go-toolset-1.20.12-1.module+el8.9.0+21033+5795bdf6.aarch64::go-toolset:rhel8 +17
Fixes 2 records
Priority LOW 35
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is n…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01137 · Published 2023-12-06 · Partial fix · 1.20.12, 1.21.5
Priority LOW 26
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01208 · Published 2023-12-06 · Partial fix · 1.20.12, 1.21.5
