Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39: FEDORA-2023-cf176d02d8 Critical: Kingpin Authentication Bypass

fedora
Calendar Grey September 20, 2023
Dist Fedora Esm H88
Patch applied for CVE-2022-46146 on golang-gopkg-alecthomas-kingpin-2 for Fedora 39, release 0.10.0.
Security fix for CVE-2022-46146, update to v0.10.0

Summary

Kingpin is a fluent-style, type-safe command-line parser. It supports flags,

nested commands, and positional arguments.

Update Information:

Security fix for CVE-2022-46146, update to v0.10.0

Topics%20covered

Topics Covered

security advisory fedora update security fix authentication bypass golang command line parser

Change Log

References


[ 1 ] Bug #2149436 - CVE-2022-46146 exporter-toolkit: authentication bypass via cache poisoning https://bugzilla.redhat.com/show_bug.cgi?id=2149436

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-cf176d02d8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: golang-gopkg-alecthomas-kingpin-2
Product: Fedora 39
Version: 2.3.2
Release: 1.fc39
URL: https://github.com/alecthomas/kingpin
Summary: Go command line and flag parser

Topics%20covered

Topics Covered

security advisory fedora update security fix authentication bypass golang command line parser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here