Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-1707

Критический

ALT-PU-2022-1707: package golang update to version 1.17.9-alt1.p10

Источник
errata.altlinux.org
Дата публикации
18.04.2022
Дата обновления
04.02.2026
Устраненные уязвимости
7

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades golang to version 1.17.9-alt1.p10.

Устраненные уязвимости7

Связанные уязвимости

CVSS3: 7.5
altlinux
около 5 лет назад

ALT-PU-2021-2786: package `golang` update to version 1.17.1-alt1

CVSS3: 5.6
ubuntu
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 5.6
redhat
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 5.6
nvd
почти 6 лет назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS3: 9.8
msrc
3 месяца назад

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.