ALT-PU-2022-2743

Высокий

ALT-PU-2022-2743: package golang update to version 1.18.7-alt1

Источник

errata.altlinux.org

Дата публикации

07.10.2022

Дата обновления

07.10.2022

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades golang to version 1.18.7-alt1.

Устраненные уязвимости3

CVE-2022-2879

Высокий 7.5

Дата публикации: 14.10.2022

CWE-770

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H