An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of ...

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.

Уязвимость пакета golang операционной системы Debian GNU/Linux, позволяющая нарушителю получить доступ к конфиденциальной информации

Security update for buildah

Security update for ignition

Security update for kubernetes1.26

Security update for containerd

Security update for go1.21

Security update for go1.22

Security update for go1.21

Security update for go1.22

Important: git-lfs security update

Important: go-toolset:rhel8 security update

net/http, x/net/http2: close connections when receiving too many headers

ELSA-2024-2699: git-lfs security update (IMPORTANT)

ELSA-2024-1963: golang security update (IMPORTANT)

ELSA-2024-1962: go-toolset:ol8 security update (IMPORTANT)

Уязвимость библиотек net/http и net/http2 языка программирования Go, связана с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Security update for google-osconfig-agent