https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:02:43.644323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1819 ALSA-2022:1819 — Moderate: go-toolset:rhel8 security and bug fix update 2026-10-03T04:02:44.061092+00:00

Affected: AlmaLinux:8: delve, AlmaLinux:8: go-toolset, AlmaLinux:8: golang, AlmaLinux:8: golang-bin, AlmaLinux:8: golang-docs, AlmaLinux:8: golang-misc, AlmaLinux:8: golang-race, AlmaLinux:8: golang-src, AlmaLinux:8: golang-tests

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

* golang: Command-line arguments may overwrite global data (CVE-2021-38297)

* golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) (CVE-2021-39293)

* golang: debug/macho: invalid dynamic symbol table command can cause panic (CVE-2021-41771)

* golang: archive/zip: Reader.Open panics on empty string (CVE-2021-41772)

* golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString (CVE-2022-23772)

* golang: cmd/go: misinterpretation of branch names can lead to incorrect access control (CVE-2022-23773)

* golang: crypto/elliptic IsOnCurve returns true for invalid field elements (CVE-2022-23806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-03899 bdu:2022-03899 2026-10-03T04:02:44.061193+00:00 bdu:2022-03899 https://cve.radiocsirt.org/vuln/bell-cve-2022-23772 Withdrawn: BELL-CVE-2022-23772 — CVE-2022-23772 does not affect BellSoft software 2026-10-03T04:02:44.061211+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2022-23772 BIT-golang-2022-23772 2026-10-03T04:02:44.061227+00:00

Affected: Bitnami: golang

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-239 certfr-2022-avi-239 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:02:44.061246+00:00 certfr-2022-avi-239 https://cve.radiocsirt.org/vuln/cnvd-2022-20541 cnvd-2022-20541 2026-10-03T04:02:44.061261+00:00 cnvd-2022-20541 https://cve.radiocsirt.org/vuln/euvd-2026-13899 EUVD-2026-13899 2026-10-03T04:02:44.061272+00:00 EUVD-2026-13899 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23772 fkie_cve-2022-23772 2026-10-03T04:02:44.061282+00:00

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

 https://cve.radiocsirt.org/vuln/ghsa-q99m-p7hq-5v4f GHSA-q99m-p7hq-5v4f 2026-10-03T04:02:44.061302+00:00

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

 https://cve.radiocsirt.org/vuln/gsd-2022-23772 gsd-2022-23772 2026-10-03T04:02:44.061316+00:00 gsd-2022-23772 https://cve.radiocsirt.org/vuln/msrc_cve-2022-23772 msrc_CVE-2022-23772 — Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled M… 2026-10-03T04:02:44.061326+00:00 msrc_CVE-2022-23772 https://cve.radiocsirt.org/vuln/oesa-2022-1585 OESA-2022-1585 — golang security update 2026-10-03T04:02:44.061342+00:00

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP2: golang, openEuler:20.03-LTS-SP3: golang

The Go Programming Language. Security Fix(es): Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.(CVE-2022-23772) Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.(CVE-2022-23806)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0723-1 openSUSE-SU-2022:0723-1 — Security update for go1.17 2026-10-03T04:02:44.061366+00:00

Security update for go1.17

 https://cve.radiocsirt.org/vuln/rhsa-2022:4860 RHSA-2022:4860 — Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.1 2026-10-03T04:02:44.061383+00:00

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

 https://cve.radiocsirt.org/vuln/suse-su-2022:0723-1 SUSE-SU-2022:0723-1 — Security update for go1.17 2026-10-03T04:02:44.061403+00:00

Security update for go1.17

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23772 UBUNTU-CVE-2022-23772 2026-10-03T04:02:44.061418+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13 and 4 more

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0023 WID-SEC-W-2022-0023 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-03T04:02:44.061453+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.