Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Fedora 39: FEDORA-2023-df54f3b4a1 Moderate: NetworkAddress Buffer Overrun

fedora
Calendar Grey October 31, 2023
Scroller Fedora
The recent Fedora patch tackles a critical buffer overflow vulnerability in the golang-github-seancfoley-ipaddress package, providing vital fixes and enhancements for users
rebuild against golang-x-image 0.13.0 ---- version 0.30.1 ---- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running ---- split out kitten clarify licenses for subpa...

Summary

Go library for handling IP addresses and subnets, both IPv4 and IPv6.

Update Information:

rebuild against golang-x-image 0.13.0 ---- version 0.30.1 ---- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running ---- split out kitten clarify licenses for subpackages

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update ipaddress library

Change Log

* Mon Sep 25 2023 Pavel Solovev - 1.5.5-1 - update to 1.5.5

References


[ 1 ] Bug #2238648 - golang-github-seancfoley-bintree-1.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2238648 [ 2 ] Bug #2241851 - *** buffer overflow detected ***: terminated https://bugzilla.redhat.com/show_bug.cgi?id=2241851

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ab43e2ce21' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: golang-github-seancfoley-ipaddress
Product: Fedora 39
Version: 1.5.5
Release: 1.fc39
URL: https://github.com/seancfoley/ipaddress-go
Summary: Go library for handling IP addresses and subnets, both IPv4 and IPv6

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update ipaddress library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.