Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-2786

Критический

ALT-PU-2021-2786: package golang update to version 1.17.1-alt1

Источник
errata.altlinux.org
Дата публикации
13.09.2021
Дата обновления
04.02.2026
Устраненные уязвимости
5

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades golang to version 1.17.1-alt1.

Устраненные уязвимости5

Связанные уязвимости

CVSS3: 7.5
altlinux
больше 4 лет назад

ALT-PU-2022-1707: package `golang` update to version 1.17.9-alt1.p10

CVSS3: 5.6
ubuntu
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 5.6
redhat
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 5.6
nvd
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 9.8
msrc
3 месяца назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.