Summary
delve
golang
[1.19.13-1]
- Rebase to Go 1.19.13
[CVE-2023-39325]
[CVE-2023-44487]
go-toolset
[1.19.13-1]
- Rebase to Go 1.19.13
[CVE-2023-39325]
[CVE-2023-44487]
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.9.1-1.0.1.module+el8.8.0+20964+30a27755 |
| Oracle Linux · 8 | go-toolset | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-bin | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-docs | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-misc | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-race | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-src | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
| Oracle Linux · 8 | golang-tests | 0:1.19.13-1.module+el8.8.0+21189+9e6e1f9f |
Vulnerabilities 2
-
High 7.5
HTTP/2 Stream Cancellation Attack
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
KEV Oct 10, 2023 -
High 7.5CVE-2023-39325 Public exploit
HTTP/2 rapid reset can cause excessive work in net/http
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…