RHSA-2024:2562 -- Redhat golang, go-toolsetID: oval:org.secpod.oval:def:509304 | Date: (C)2024-05-23 (M)2024-06-18 |
Class: PATCH | Family: unix |
The golang packages provide the Go programming language compiler. Security Fix: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads golang: net/ http: memory exhaustion in Request.ParseMultipartForm golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm golang: net/mail: comments in display names are incorrectly handled golang: html/template: errors returned from MarshalJSON methods may break template escaping golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Platform: |
Red Hat Enterprise Linux 9 |