go1.10 vulnerabilities (openSUSE)
12 vulnerabilities.
-
go1.10openSUSE Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which... 8.2 High -
go1.10openSUSE The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... 5.9 Medium -
go1.10openSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... 6.8 Medium -
go1.10openSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... 7.5 High -
go1.10openSUSE Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"... 7.8 High -
go1.10openSUSE An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires... 5.9 Medium -
go1.10openSUSE Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom... 9.8 Critical -
go1.10openSUSE A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in... 5.9 Medium -
go1.10openSUSE The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18... 8.1 High -
go1.10openSUSE The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not... 7.5 High -
go1.10openSUSE The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry... 7.5 High -
go1.10openSUSE crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the... 4.3 Medium