Most recent entries from all

ALSA-2024:4212 — Moderate: golang security update

Affected: AlmaLinux:9: go-toolset, AlmaLinux:9: golang, AlmaLinux:9: golang-bin, AlmaLinux:9: golang-docs, AlmaLinux:9: golang-misc, AlmaLinux:9: golang-src, AlmaLinux:9: golang-tests

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-04485

BELL-CVE-2024-24789

Affected: Alpaquita:23: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:stream: go

BIT-golang-2024-24789 — Mishandling of corrupt central directory record in archive/zip

Affected: Bitnami: golang

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

certfr-2024-avi-0873 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0873

EUVD-2026-217245

fkie_cve-2024-24789

GHSA-236w-p7wf-5ph8

gsd-2024-24789

msrc_CVE-2024-24789 — Mishandling of corrupt central directory record in archive/zip

msrc_CVE-2024-24789

OESA-2024-1769 — golang security update

Affected: openEuler:22.03-LTS-SP3: golang

The Go Programming Language. Security Fix(es): The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.(CVE-2024-24789)

openSUSE-SU-2024:14020-1 — go1.22-1.22.4-1.1 on GA media

go1.22-1.22.4-1.1 on GA media

RHEA-2025:0507 — Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

golang: net: malformed DNS message can cause infinite loop golang: archive/zip: Incorrect handling of certain ZIP files golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

SUSE-SU-2024:1935-1 — Security update for go1.22

Security update for go1.22

UBUNTU-CVE-2024-24789

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.21 and 13 more

WID-SEC-W-2024-1287 — Golang Go: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu manipulieren.