Summary
The golang packages provide the Go programming language compiler.
Security Fix(es):
* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)
* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | go-toolset | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang-bin | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang-docs | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang-misc | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang-src | 1.21.9-2.el9_4 |
| AlmaLinux · 9 | golang-tests | 1.21.9-2.el9_4 |
Vulnerabilities 7
-
High 7.5
HTTP/2 CONTINUATION flood in net/http
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…
-
High 7.5
Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects…
-
High 7.5
Comments in display names are incorrectly handled in net/mail
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
-
Medium 6.5
Memory exhaustion in multipart form parsing in net/textproto and net/http
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…
-
Medium 5.9
Verify panics on certificates with an unknown public key algorithm in crypto/x509
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…
-
Medium 5.4
Errors returned from JSON marshaling may break template escaping in html/template
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
-
Medium 4.3
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will fo…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-45288
-
report
https://access.redhat.com/security/cve/CVE-2023-45289
-
report
https://access.redhat.com/security/cve/CVE-2023-45290
-
report
https://access.redhat.com/security/cve/CVE-2024-1394
-
report
https://access.redhat.com/security/cve/CVE-2024-24783
-
report
https://access.redhat.com/security/cve/CVE-2024-24784
-
report
https://access.redhat.com/security/cve/CVE-2024-24785
-
report
https://bugzilla.redhat.com/2262921
-
report
https://bugzilla.redhat.com/2268017
-
report
https://bugzilla.redhat.com/2268018
-
report
https://bugzilla.redhat.com/2268019
-
report
https://bugzilla.redhat.com/2268021
-
report
https://bugzilla.redhat.com/2268022
-
report
https://bugzilla.redhat.com/2268273
-
advisory
https://errata.almalinux.org/9/ALSA-2024-2562.html