TI-2024-22606 CVE-2024-34156 · GHSA-crqm-pwhx-j97f
Stack exhaustion in Decoder.Decode in encoding/gob
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
RHSA-2024:7262
osbuild-composer security update
Released 2024-09-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101-2.el8_10, osbuild-composer-core-101-2.el8_10, osbuild-composer-worker-101-2.el8_10
Fixes 2 records
TI-2024-01301 CVE-2024-1394 · GHSA-78hx-gp6g-7mj6
Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Priority LOW 36
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs.