Fedora 42: gosec Security Update 2.22.11 CVE-2025-47910 Cross Origin Issues
fedora
December 20, 2025
Update to 2.22.11
Summary
Go security checker.
Update Information:
Update to 2.22.11
Topics Covered
Change Log
* Thu Dec 11 2025 Mikel Olasagasti Uranga
References
[ 1 ] Bug #2398826 - CVE-2025-47910 gosec: CrossOriginProtection bypass in net/http [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2398826
[ 2 ] Bug #2399498 - CVE-2025-47906 gosec: Unexpected paths returned from LookPath in os/exec [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2399498
[ 3 ] Bug #2408033 - CVE-2025-58189 gosec: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2408033
[ 4 ] Bug #2409501 - CVE-2025-61723 gosec: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2409501
[ 5 ] Bug #2410452 - CVE-2025-58185 gosec: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2410452
[ 6 ] Bug #2411351 - CVE-2025-58188 gosec: Panic when validating certificates with DSA public k...
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-447e38400e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: gosec
Product: Fedora 42
Version: 2.22.11
Release: 2.fc42
Summary: Go security checker
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!