Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: MGASA-2022-0473 Critical: Golang Header Cache Management Issue

mageia
Calendar Grey December 17, 2022
Dist Mageia Esm H88
Recent updates in Go packages address a significant security vulnerability in Mageia, related to the management of header caches.
net/http: limit canonical header cache by bytes, not entries (bsc#1206135) (CVE-2022-41717) References: - https://bugs.mageia.org/show_bug.cgi?id=31267

Summary

net/http: limit canonical header cache by bytes, not entries (bsc#1206135) (CVE-2022-41717)

References

- https://bugs.mageia.org/show_bug.cgi?id=31267

- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013213.html

- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013214.html

-

-

- https://www.cve.org/CVERecord?id=CVE-2022-41717

Topics%20covered

Topics Covered

security advisory critical Mageia Golang network package header cache management issue

Resolution

SRPMS

- 8/core/golang-1.18.9-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 17 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0473.html
Type: security
CVE: CVE-2022-41717

Topics%20covered

Topics Covered

security advisory critical Mageia Golang network package header cache management issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here