p PatchFirst

RLSA-2023:3083

RLSA-2023:3083 · Moderate: go-toolset:Rocky Linux8 security and bug fix update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412) * Update Go to 1.19.6 (BZ#2174430)

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • delve Rocky Linux:8

    Plages de versions concernées
    • ECOSYSTEM: < 0:1.9.1-1.module+el8.8.0+1263+19d1a562

    Mettez à jour vers 0:1.9.1-1.module+el8.8.0+1263+19d1a562

  • golang Rocky Linux:8

    Plages de versions concernées
    • ECOSYSTEM: < 0:1.19.6-1.module+el8.8.0+1263+19d1a562

    Mettez à jour vers 0:1.19.6-1.module+el8.8.0+1263+19d1a562

  • go-toolset Rocky Linux:8

    Plages de versions concernées
    • ECOSYSTEM: < 0:1.19.6-1.module+el8.8.0+1263+19d1a562

    Mettez à jour vers 0:1.19.6-1.module+el8.8.0+1263+19d1a562

Sources originales

Vérifiez votre serveur →