FEDORA-2024-fb32950d11
Packages in this update:
golang-x-mod-0.14.0-1.fc39
Update description:
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325
golang-x-mod-0.14.0-1.fc39
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325
golang-x-mod-0.14.0-1.el9
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325
golang-x-mod-0.14.0-1.fc38
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325
Yu Hao discovered that the UBI driver in the Linux kernel did not properly
check for MTD with zero erasesize during device attachment. A local
privileged attacker could use this to cause a denial of service (system
crash). (CVE-2023-31085)
Bien Pham discovered that the netfiler subsystem in the Linux kernel
contained a race condition, leading to a use-after-free vulnerability. A
local user could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-4244)
Maxim Levitsky discovered that the KVM nested virtualization (SVM)
implementation for AMD processors in the Linux kernel did not properly
handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a
denial of service (host kernel crash). (CVE-2023-5090)
It was discovered that the SMB network file sharing protocol implementation
in the Linux kernel did not properly handle certain error conditions,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2023-5345)
Murray McAllister discovered that the VMware Virtual GPU DRM driver in the
Linux kernel did not properly handle memory objects when storing surfaces,
leading to a use-after-free vulnerability. A local attacker in a guest VM
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-5633)
golang-x-crypto-0.18.0-1.el9
Update golang-x-crypto to v0.18.0, fix for CVE-2023-48795
golang-x-net-0.20.0-1.fc38
update to v0.20.0 for CVE-2023-39325
golang-x-net-0.20.0-1.fc39
update to v0.20.0 for CVE-2023-39325
The vulnerability could lead to remote code execution on affected systems
golang-x-crypto-0.18.0-1.fc38
Update golang-x-crypto to v0.18.0, fix for CVE-2023-48795
golang-x-crypto-0.18.0-1.fc39
Update golang-x-crypto to v0.18.0, fix for CVE-2023-48795