Golang Go: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2024-24790

  Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

  The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

  Go standard library net/netip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 5, 2024
• Medium 5.3
  CVE-2024-24789

  Mishandling of corrupt central directory record in archive/zip

  The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…

  Go standard library archive/zip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 5, 2024

Revision history

1. 2026-01-18 #67

   Neue Updates von Dell aufgenommen

2. 2025-08-04 #66

   Neue Updates von Dell aufgenommen

3. 2025-07-28 #65

   Neue Updates von Fedora aufgenommen

4. 2025-06-26 #64

   Neue Updates von Red Hat aufgenommen

5. 2025-06-02 #63

   Neue Updates von Splunk-SVD aufgenommen

6. 2025-05-29 #62

   Neue Updates von Amazon und Red Hat aufgenommen

7. 2025-05-13 #61

   Neue Updates von Red Hat aufgenommen

8. 2025-05-07 #60

   Neue Updates von Red Hat aufgenommen

9. 2025-04-27 #59

   Neue Updates von Red Hat aufgenommen

10. 2025-04-09 #58

    Neue Updates von IBM aufgenommen

11. 2025-02-16 #57

    Neue Updates von Dell aufgenommen

12. 2025-02-12 #56

    Neue Updates von Oracle Linux aufgenommen

13. 2025-02-04 #55

    Neue Updates von openSUSE aufgenommen

14. 2025-01-12 #54

    Neue Updates von XEROX aufgenommen

15. 2025-01-06 #53

    Neue Updates von IBM aufgenommen

16. 2024-12-15 #52

    Neue Updates von Fedora aufgenommen

17. 2024-12-09 #51

    Neue Updates von Red Hat aufgenommen

18. 2024-12-03 #50

    Neue Updates von Red Hat aufgenommen

19. 2024-11-21 #49

    Neue Updates von Red Hat aufgenommen

20. 2024-11-14 #48

    Neue Updates von Ubuntu aufgenommen

21. 2024-11-13 #47

    Neue Updates von Red Hat aufgenommen

22. 2024-11-11 #46

    Neue Updates von Red Hat aufgenommen

23. 2024-11-07 #45

    Neue Updates von SUSE aufgenommen

24. 2024-11-04 #44

    Neue Updates von Red Hat aufgenommen

25. 2024-10-29 #43

    Neue Updates von SUSE und Red Hat aufgenommen

References

• oss-sec mailing list archives vom 2024-06-04
  https://seclists.org/oss-sec/2024/q2/268
• Golang GitHub vom 2024-06-04
  https://github.com/golang/go/issues/66869
• Golang GitHub vom 2024-06-04
  https://github.com/golang/go/issues/67680
• SUSE Security Update SUSE-SU-2024:1970-1 vom 2024-06-10
  https://lists.suse.com/pipermail/sle-security-updates/2024-June/018674.html
• SUSE Security Update SUSE-SU-2024:1969-1 vom 2024-06-10
  https://lists.suse.com/pipermail/sle-security-updates/2024-June/018675.html
• Fedora Security Advisory FEDORA-2024-15039BA9F9 vom 2024-06-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-15039ba9f9
• Fedora Security Advisory FEDORA-2024-D2EC3E14A7 vom 2024-06-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d2ec3e14a7
• Amazon Linux Security Advisory ALAS-2024-2576 vom 2024-06-25
  https://alas.aws.amazon.com/AL2/ALAS-2024-2576.html
• Amazon Linux Security Advisory ALAS-2024-646 vom 2024-07-02
  https://alas.aws.amazon.com/AL2023/ALAS-2024-646.html
• Red Hat Security Advisory RHSA-2024:4212 vom 2024-07-02
  https://access.redhat.com/errata/RHSA-2024:4212
• Oracle Linux Security Advisory ELSA-2024-4212 vom 2024-07-03
  https://linux.oracle.com/errata/ELSA-2024-4212.html
• Red Hat Security Advisory RHSA-2024:4237 vom 2024-07-03
  https://access.redhat.com/errata/RHSA-2024:4237
• Oracle Linux Security Advisory ELSA-2024-4237 vom 2024-07-03
  https://linux.oracle.com/errata/ELSA-2024-4237.html
• Ubuntu Security Notice USN-6886-1 vom 2024-07-09
  https://ubuntu.com/security/notices/USN-6886-1
• Rocky Linux Security Advisory RLSA-2024:4212 vom 2024-07-15
  https://errata.build.resf.org/RLSA-2024:4212
• Red Hat Security Advisory RHSA-2024:4335 vom 2024-07-17
  https://access.redhat.com/errata/RHSA-2024:4335
• Red Hat Security Advisory RHSA-2024:4697 vom 2024-07-23
  https://access.redhat.com/errata/RHSA-2024:4697
• Red Hat Security Advisory RHSA-2024:4333 vom 2024-07-24
  https://access.redhat.com/errata/RHSA-2024:4333
• Red Hat Security Advisory RHSA-2024:4336 vom 2024-07-24
  https://access.redhat.com/errata/RHSA-2024:4336
• Red Hat Security Advisory RHSA-2024:4613 vom 2024-07-25
  https://access.redhat.com/errata/RHSA-2024:4613
• Red Hat Security Advisory RHSA-2024:4867 vom 2024-07-25
  https://access.redhat.com/errata/RHSA-2024:4867
• Red Hat Security Advisory RHSA-2024:4872 vom 2024-07-26
  https://access.redhat.com/errata/RHSA-2024:4872
• Red Hat Security Advisory RHSA-2024:4893 vom 2024-07-29
  https://access.redhat.com/errata/RHSA-2024:4893
• Fedora Security Advisory FEDORA-2024-A076D7AE8E vom 2024-07-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-a076d7ae8e
• Fedora Security Advisory FEDORA-2024-8669C2A944 vom 2024-07-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8669c2a944
• Fedora Security Advisory FEDORA-2024-69692D6FAC vom 2024-07-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-69692d6fac
• Fedora Security Advisory FEDORA-2024-C83208238D vom 2024-07-29
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c83208238d
• Red Hat Security Advisory RHSA-2024:4982 vom 2024-08-02
  https://access.redhat.com/errata/RHSA-2024:4982
• IBM Security Bulletin 7162893 vom 2024-08-06
  https://www.ibm.com/support/pages/node/7162893
• Red Hat Security Advisory RHSA-2024:4785 vom 2024-08-07
  https://access.redhat.com/errata/RHSA-2024:4785
• Red Hat Security Advisory RHSA-2024:5094 vom 2024-08-08
  https://access.redhat.com/errata/RHSA-2024:5094
• Red Hat Security Advisory RHSA-2024:5075 vom 2024-08-07
  https://access.redhat.com/errata/RHSA-2024:5075
• Red Hat Security Advisory RHSA-2024:5077 vom 2024-08-07
  https://access.redhat.com/errata/RHSA-2024:5077
• Fedora Security Advisory FEDORA-2024-3EF0D3C37D vom 2024-08-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3ef0d3c37d
• Red Hat Security Advisory RHSA-2024:5258 vom 2024-08-13
  https://access.redhat.com/errata/RHSA-2024:5258
• Red Hat Security Advisory RHSA-2024:5291 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5291
• Oracle Linux Security Advisory ELSA-2024-5291 vom 2024-08-14
  https://linux.oracle.com/errata/ELSA-2024-5291.html
• Oracle Linux Security Advisory ELSA-2024-5258 vom 2024-08-14
  https://linux.oracle.com/errata/ELSA-2024-5258.html
• Red Hat Security Advisory RHSA-2024:5202 vom 2024-08-19
  https://access.redhat.com/errata/RHSA-2024:5202
• Red Hat Security Advisory RHSA-2024:5547 vom 2024-08-19
  https://access.redhat.com/errata/RHSA-2024:5547
• Rocky Linux Security Advisory RLSA-2024:5258 vom 2024-08-21
  https://errata.build.resf.org/RLSA-2024:5258
• IBM Security Bulletin 7166464 vom 2024-08-23
  https://www.ibm.com/support/pages/node/7166464
• Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-046 vom 2024-08-29
  https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-046.html
• Amazon Linux Security Advisory ALASDOCKER-2024-045 vom 2024-08-29
  https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-045.html
• Amazon Linux Security Advisory ALASDOCKER-2024-043 vom 2024-08-29
  https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-043.html
• Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-044 vom 2024-08-29
  https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-044.html
• Amazon Linux Security Advisory ALASECS-2024-042 vom 2024-09-03
  https://alas.aws.amazon.com/AL2/ALASECS-2024-042.html
• SUSE Security Update SUSE-SU-2024:3089-1 vom 2024-09-03
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019369.html
• Red Hat Security Advisory RHSA-2024:6004 vom 2024-09-04
  https://access.redhat.com/errata/RHSA-2024:6004
• Red Hat Security Advisory RHSA-2024:6462 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6462
• Red Hat Security Advisory RHSA-2024:6765 vom 2024-09-18
  https://access.redhat.com/errata/RHSA-2024:6765
• SUSE Security Update SUSE-SU-2024:3360-1 vom 2024-09-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019493.html
• Red Hat Security Advisory RHSA-2024:3722 vom 2024-10-02
  https://access.redhat.com/errata/RHSA-2024:3722
• Red Hat Security Advisory RHSA-2024:3718 vom 2024-10-02
  https://access.redhat.com/errata/RHSA-2024:3718
• Amazon Linux Security Advisory ALAS-2024-2645 vom 2024-10-02
  https://alas.aws.amazon.com/AL2/ALAS-2024-2645.html
• Red Hat Security Advisory RHSA-2024:7987 vom 2024-10-10
  https://access.redhat.com/errata/RHSA-2024:7987
• Splunk Security Advisory SVD-2024-1012 vom 2024-10-14
  https://advisory.splunk.com//advisories/SVD-2024-1012
• Red Hat Security Advisory RHSA-2024:7548 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:7548
• Red Hat Security Advisory RHSA-2024:6341 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:6341
• SUSE Security Update SUSE-SU-2024:3755-1 vom 2024-10-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IDZD3NVTACJTTUYRJDCRM2C2RTOJVHD6/
• Fedora Security Advisory FEDORA-EPEL-2024-6CAEB5A95F vom 2024-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6caeb5a95f
• Fedora Security Advisory FEDORA-2024-4D24786142 vom 2024-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-4d24786142
• Fedora Security Advisory FEDORA-2024-4FC7CDC194 vom 2024-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-4fc7cdc194
• Fedora Security Advisory FEDORA-2024-AA6E72C713 vom 2024-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-aa6e72c713
• Fedora Security Advisory FEDORA-EPEL-2024-01E6624836 vom 2024-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-01e6624836
• SUSE Security Update SUSE-SU-2024:3772-1 vom 2024-10-29
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019688.html
• Red Hat Security Advisory RHSA-2024:8418 vom 2024-10-30
  https://access.redhat.com/errata/RHSA-2024:8418
• Red Hat Security Advisory RHSA-2024:8876 vom 2024-11-05
  https://access.redhat.com/errata/RHSA-2024:8876
• SUSE Security Update SUSE-SU-2024:3938-1 vom 2024-11-07
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019791.html
• Red Hat Security Advisory RHSA-2024:9102 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9102
• Red Hat Security Advisory RHSA-2024:9115 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9115
• Red Hat Security Advisory RHSA-2024:9583 vom 2024-11-13
  https://access.redhat.com/errata/RHSA-2024:9583
• Ubuntu Security Notice USN-7111-1 vom 2024-11-14
  https://ubuntu.com/security/notices/USN-7111-1
• Ubuntu Security Notice USN-7109-1 vom 2024-11-14
  https://ubuntu.com/security/notices/USN-7109-1
• Red Hat Security Advisory RHSA-2024:10186 vom 2024-11-22
  https://access.redhat.com/errata/RHSA-2024:10186
• Red Hat Security Advisory RHSA-2024:10775 vom 2024-12-04
  https://access.redhat.com/errata/RHSA-2024:10775
• Red Hat Security Advisory RHSA-2024:10906 vom 2024-12-10
  https://access.redhat.com/errata/RHSA-2024:10906
• Fedora Security Advisory FEDORA-2024-6267B82CF7 vom 2024-12-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6267b82cf7
• IBM Security Bulletin 7180361 vom 2025-01-07
  https://www.ibm.com/support/pages/node/7180361
• XEROX Security Advisory XRX25-001 vom 2025-01-13
  https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-001-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf