Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::crb | golang-github-cpuguy83-md2man | 0:2.0.2-4.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | golang-github-cpuguy83-md2man-debuginfo | 0:2.0.2-4.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | golang-github-cpuguy83-md2man-debugsource | 0:2.0.2-4.el9 |
Vulnerabilities 1
-
Unscored —
Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000,…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2037812
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2149240
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2592.json
-
report
https://access.redhat.com/security/cve/CVE-2022-41715
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-41715
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41715
-
article
https://github.com/golang/go/issues/55949
-
article
https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1