Security
فارسی
All products

Red Hat Enterprise Linux 7/golang

Red Hat · Package
43 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
Authentication Bypass in github.com/russellhaering/gosaml2CVE-2020-29509 · GHSA-XHQQ-X44F-9FGGVersion ranges need review. github.com/russellhaering/gosaml2Red Hat Enterprise Linux 7/golang GoRed Hat Critical Fix reported
golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Mishandled trust preferences for root certificates on Darwin in crypto/x509CVE-2017-1000097 · GO-2022-0171 stdlibRed Hat Enterprise Linux 7/golang GoRed Hat Low Fix reported
Remote command execution via "go get" command with "-insecure" option in cmd/goCVE-2018-7187 · GO-2022-0203 toolchainRed Hat Enterprise Linux 7/golang GoRed Hat Medium Fix reported
Denial of service in chain verification in crypto/x509CVE-2018-16875 · GO-2022-0191 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Directory traversal via "go get" command in cmd/goCVE-2018-16874 · GO-2022-0190 toolchainRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Remote command execution via "go get" with "-u" flag in cmd/goCVE-2018-16873 · GO-2022-0189 toolchainRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Incorrect parsing validation in net/urlCVE-2019-14809 · GO-2022-0211 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Panic on invalid DSA public keys in crypto/dsaCVE-2019-17596 · GO-2022-0213 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Cross-site scripting in net/http/cgi and net/http/fcgiCVE-2020-24553 · GO-2021-0226 stdlibOpenShift Serverless/cli GoRed Hat Medium Fix reported
Arbitrary code execution via the go command with cgo in cmd/goCVE-2020-28367 · GO-2022-0476 toolchainOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgoCVE-2020-28366 · GO-2022-0475 toolchainOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Arbitrary code injection via the go command with cgo on Windows in cmd/goCVE-2021-3115 · GO-2021-0068 toolchainOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported