go1.25-openssl vulnerabilities (SUSE)
61 vulnerabilities.
go1.25-opensslSUSEFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 Highgo1.25-opensslSUSEIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 Highgo1.25-opensslSUSELimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgo1.25-opensslSUSEAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgo1.25-opensslSUSEAdd recursion depth guard during decode in encoding/xml7.5 Highgo1.25-opensslSUSEFix Javascript regexp context tracking in html/template6.1 Mediumgo1.25-opensslSUSEApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgo1.25-opensslSUSEEnforce maximum recursion depth in encoding/asn17.5 Highgo1.25-opensslSUSEInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgo1.25-opensslSUSERoot escape via symlink plus trailing slash in os7.8 Highgo1.25-opensslSUSEArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgo1.25-opensslSUSEQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgo1.25-opensslSUSEInefficient candidate hostname parsing in crypto/x5096.5 Mediumgo1.25-opensslSUSEMalicious module proxy can bypass checksum database in cmd/go7.5 Highgo1.25-opensslSUSEQuadratic string concatenation in consumePhrase in net/mail7.5 Highgo1.25-opensslSUSEPanic in Dial and LookupPort when handling NUL byte on Windows in net7.5 Highgo1.25-opensslSUSEEscaper bypass leads to XSS in html/template6.1 Mediumgo1.25-opensslSUSEReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgo1.25-opensslSUSEBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgo1.25-opensslSUSEQuadratic string concatentation in consumeComment in net/mail7.5 Highgo1.25-opensslSUSEInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgo1.25-opensslSUSEInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgo1.25-opensslSUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgo1.25-opensslSUSECrash when handling long CNAME response in net7.5 Highgo1.25-opensslSUSEJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgo1.25-opensslSUSEUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgo1.25-opensslSUSEUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgo1.25-opensslSUSETOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgo1.25-opensslSUSEInefficient policy validation in crypto/x5097.5 Highgo1.25-opensslSUSEUnexpected work during chain building in crypto/x5097.5 Highgo1.25-opensslSUSEMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 Highgo1.25-opensslSUSEMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgo1.25-opensslSUSECode execution vulnerability in SWIG code generation in cmd/go8.8 Highgo1.25-opensslSUSEURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgo1.25-opensslSUSEFileInfo can escape from a Root in os2.5 Lowgo1.25-opensslSUSEIncorrect parsing of IPv6 host literals in net/url7.5 Highgo1.25-opensslSUSEPotential code smuggling via doc comments in cmd/cgo8.6 Highgo1.25-opensslSUSEUnexpected session resumption in crypto/tls10.0 Criticalgo1.25-opensslSUSEArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgo1.25-opensslSUSEUnexpected code execution when invoking toolchain in cmd/go7.0 Highgo1.25-opensslSUSEHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgo1.25-opensslSUSEExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgo1.25-opensslSUSEMemory exhaustion in query parameter parsing in net/url7.5 Highgo1.25-opensslSUSEImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgo1.25-opensslSUSEExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgo1.25-opensslSUSEExcessive CPU consumption in ParseAddress in net/mail7.5 Highgo1.25-opensslSUSEExcessive CPU consumption in Reader.ReadResponse in net/textproto5.3 Mediumgo1.25-opensslSUSEQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgo1.25-opensslSUSEALPN negotiation error contains attacker controlled information in crypto/tls5.3 Mediumgo1.25-opensslSUSEPanic when validating certificates with DSA public keys in crypto/x5097.5 High- Show olderLoading…