Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-8477

Опубликовано: 27 июн. 2025
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2025-8477: golang security update (MODERATE)

[1.23.9-1]

  • Update to 1.23.9

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

go-toolset

1.23.9-1.el10_0

golang

1.23.9-1.el10_0

golang-bin

1.23.9-1.el10_0

golang-docs

1.23.9-1.el10_0

golang-misc

1.23.9-1.el10_0

golang-src

1.23.9-1.el10_0

golang-tests

1.23.9-1.el10_0

Oracle Linux x86_64

go-toolset

1.23.9-1.el10_0

golang

1.23.9-1.el10_0

golang-bin

1.23.9-1.el10_0

golang-docs

1.23.9-1.el10_0

golang-misc

1.23.9-1.el10_0

golang-src

1.23.9-1.el10_0

golang-tests

1.23.9-1.el10_0

Связанные CVE

Связанные уязвимости

CVSS3: 9.1
ubuntu
4 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 5.4
redhat
4 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
nvd
4 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
msrc
4 месяца назад

Описание отсутствует

CVSS3: 9.1
debian
4 месяца назад

The net/http package improperly accepts a bare LF as a line terminator ...