Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
217
security advisorypackage updatemoderate threatOracle Linux 8 ELSA-2025-8478 Moderate: Golang Updates and Security Fixes
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8478 http://linux.oracle.com/errata/ELSA-2025-8478.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-bin-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-docs-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-misc-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-src-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-tests-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm aarch64: delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-bin-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-docs-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-misc-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-src-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-tests-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//golang-1.23.9-1.module+el8.10.0+90602+3daf471e.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.src.rpm Related CVEs: CVE-2025-22871 Description of changes: delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 go-toolset [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 _______________________________________________ El-errata mailing list
Jun 05, 2025
•Important
Oracle
217
security advisorysecurity issuesoftware updateOracle Linux 9 ELSA-2024-6913 critical: golang security updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-6913 http://linux.oracle.com/errata/ELSA-2024-6913.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: go-toolset-1.21.13-3.el9_4.x86_64.rpm golang-1.21.13-3.el9_4.x86_64.rpm golang-bin-1.21.13-3.el9_4.x86_64.rpm golang-docs-1.21.13-3.el9_4.noarch.rpm golang-misc-1.21.13-3.el9_4.noarch.rpm golang-src-1.21.13-3.el9_4.noarch.rpm golang-tests-1.21.13-3.el9_4.noarch.rpm aarch64: go-toolset-1.21.13-3.el9_4.aarch64.rpm golang-1.21.13-3.el9_4.aarch64.rpm golang-bin-1.21.13-3.el9_4.aarch64.rpm golang-docs-1.21.13-3.el9_4.noarch.rpm golang-misc-1.21.13-3.el9_4.noarch.rpm golang-src-1.21.13-3.el9_4.noarch.rpm golang-tests-1.21.13-3.el9_4.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//golang-1.21.13-3.el9_4.src.rpm Related CVEs: CVE-2024-24791 CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 Description of changes: [1.21.13-3] - Related: RHEL-58226 [1.21.13-2] - Rebuild Go with CVE Fixes - Remove fix-memleak-setupRSA.patch (exists upstream) - Resolves: RHEL-58226 - Resolves: RHEL-57962 - Resolves: RHEL-57848 - Resolves: RHEL-57865 [1.21.13-1] - Rebase to Go1.21.13 to pick the fix for CVE-2024-24791 - Technically Go1.21.12 contains the fix for the CVE but there was another latest release so rebasing to that - Resolves: RHEL-53547 _______________________________________________ El-errata mailing list
Sep 24, 2024
•Critical
Oracle
89
security advisorymoderatefedoraFedora 38: FEDORA-2023-8ee7d4a8e3 Moderate: Go Crypto Issue
go1.20.2 (released 2023-03-07) includes a security fix to the crypto/elliptic package, as well as bug fixes to the compiler, the covdata command, the linker, the runtime, and the crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages. See the [Go 1.20.2 milestone on the upstream issue](https://go.dev/doc/devel/release#go1.20.2) tracker for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-8ee7d4a8e3 2023-04-04 00:16:16.774824 --------------------------------------------------------------------------------Name : golang Product : Fedora 38 Version : 1.20.2 Release : 1.fc38 URL : https://go.dev Summary : The Go Programming Language Description : The Go Programming Language. --------------------------------------------------------------------------------Update Information: go1.20.2 (released 2023-03-07) includes a security fix to the crypto/elliptic package, as well as bug fixes to the compiler, the covdata command, the linker, the runtime, and the crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages. See the [Go 1.20.2 milestone on the upstream issue](https://go.dev/doc/devel/release#go1.20.2) tracker for details. --------------------------------------------------------------------------------ChangeLog: * Thu Mar 23 2023 Bradley G Smith - 1.20.2-1 - Update to go1.20.2 - Resolves: rhbz#2176528, in part --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-8ee7d4a8e3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 04, 2023
•Important
Fedora
89
security advisoryhigh severitysecurity issueFedora 36: 2022-37aef44d1e High Severity: Golang API Server Security
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-37aef44d1e 2022-07-30 01:52:05.591856 --------------------------------------------------------------------------------Name : golang-k8s-sample-apiserver Product : Fedora 36 Version : 1.22.0 Release : 6.fc36 URL : https://github.com/kubernetes/sample-apiserver Summary : Reference implementation of an apiserver for a custom Kubernetes API Description : Demonstration of how to use the k8s.io/apiserver library to build a functional API server. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028) --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G 1.22.0-6 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-37aef44d1e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 29, 2022
Fedora
89
security advisorymoderateFedoraFedora 37: 2023-4e5b89c2be Minor: Go AWS SDK Enhancement
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-37aef44d1e 2022-07-30 01:52:05.591856 --------------------------------------------------------------------------------Name : golang-github-uber-athenadriver Product : Fedora 36 Version : 1.1.12 Release : 6.fc36 URL : https://github.com/uber/athenadriver Summary : A fully-featured AWS Athena database driver Description : A fully-featured AWS Athena database driver. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028) --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G - 1.1.12-6 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-37aef44d1e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 29, 2022
•Important
Fedora
89
security advisoryFedorasoftware rebuildFedora 36: FEDORA-2022-37aef44d1e Moderate: Golang ROM Update
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-37aef44d1e 2022-07-30 01:52:05.591856 --------------------------------------------------------------------------------Name : golang-github-mroach-rom64 Product : Fedora 36 Version : 0.5.3 Release : 2.fc36 URL : https://github.com/mroach/rom64 Summary : Nintendo 64 ROM utility Description : Nintendo 64 ROM utility written in Go: - List information about all ROMs in a directory - Show information about a single ROM - Convert a ROM file to the native (Z64, Big-endian) format - Validate the ROM's SHA-1 checksum against a list of known-good ROM dumps. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- enable s390x build (rhbz#1971028) --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G 0.5.3-2 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-37aef44d1e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Projectcan be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 29, 2022
Fedora
89
security advisorymoderateFedoraFedora 36: 2022-ea8f4e232d Moderate Update for golang-github-eknkc-amber
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-ea8f4e232d 2022-07-30 01:52:05.591840 --------------------------------------------------------------------------------Name : golang-github-eknkc-amber Product : Fedora 36 Version : 0 Release : 0.18.20190601gitcdade1c.fc36 URL : https://github.com/eknkc/amber Summary : Elegant templating engine for Go Programming Language Description : Amber is an elegant templating engine for Go Programming Language It is inspired from HAML and Jade --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G - 0-0.18 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-ea8f4e232d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announcemailing list --
Jul 29, 2022
Fedora
100
security advisorydenial of serviceimportantSUSE: 2022:1572-1 Severe: Buffer Overflow Vulnerability in Grafana
An update that solves one vulnerability, contains one feature and has one errata is now available. . SUSE Security Update: Security update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1434-1 Rating: important References: #1196338 #1197042 SLE-24376 Cross-References: CVE-2022-21698 CVSS scores: CVE-2022-21698 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-21698 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Manager Tools 15 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has one errata is now available. Description: This update for golang-github-prometheus-prometheus fixes the following issues: Security fixes for golang-github-prometheus-prometheus: - CVE-2022-21698: Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods (bsc#1196338). Other non security changes for golang-github-prometheus-prometheus: - Build `firewalld-prometheus-config` only for SUSE Linux Enterprise 15, 15-SP1 and 15-SP2, and require `firewalld`. - Only recommends `firewalld-prometheus-config` as prometheus does not require it to run. - Create `firewalld-prometheus-config` subpackage (bsc#1197042, jsc#SLE-24376) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Tools 15: zypper in -t patch SUSE-SLE-Manager-Tools-15-2022-1434=1 Package List: - SUSE Manager Tools 15 (aarch64 ppc64le s390x x86_64): firewalld-prometheus-config-0.1-150000.3.41.2 golang-github-prometheus-prometheus-2.32.1-150000.3.41.2 References: https://www.suse.com/security/cve/CVE-2022-21698.html https://bugzilla.suse.com/1196338 https://bugzilla.suse.com/1197042 . SUSE Security Patch: Critical resolution for golang-github-prometheus tackling service interruption and memory vulnerabilities.. SUSE Manager Tools,Golang Update,Important Security Fix,Denial Of Service. . Severity: Important. LinuxSecurity.com Team
Apr 27, 2022
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!