go1.25-openssl vulnerabilities (openSUSE)
61 vulnerabilities.
go1.25-opensslopenSUSEFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 Highgo1.25-opensslopenSUSEIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 Highgo1.25-opensslopenSUSELimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgo1.25-opensslopenSUSEAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgo1.25-opensslopenSUSEAdd recursion depth guard during decode in encoding/xml7.5 Highgo1.25-opensslopenSUSEFix Javascript regexp context tracking in html/template6.1 Mediumgo1.25-opensslopenSUSEApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgo1.25-opensslopenSUSEEnforce maximum recursion depth in encoding/asn17.5 Highgo1.25-opensslopenSUSEInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgo1.25-opensslopenSUSERoot escape via symlink plus trailing slash in os7.8 Highgo1.25-opensslopenSUSEArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgo1.25-opensslopenSUSEQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgo1.25-opensslopenSUSEInefficient candidate hostname parsing in crypto/x5096.5 Mediumgo1.25-opensslopenSUSEMalicious module proxy can bypass checksum database in cmd/go7.5 Highgo1.25-opensslopenSUSEQuadratic string concatenation in consumePhrase in net/mail7.5 Highgo1.25-opensslopenSUSEPanic in Dial and LookupPort when handling NUL byte on Windows in net7.5 Highgo1.25-opensslopenSUSEEscaper bypass leads to XSS in html/template6.1 Mediumgo1.25-opensslopenSUSEReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgo1.25-opensslopenSUSEBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgo1.25-opensslopenSUSEQuadratic string concatentation in consumeComment in net/mail7.5 Highgo1.25-opensslopenSUSEInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgo1.25-opensslopenSUSEInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgo1.25-opensslopenSUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgo1.25-opensslopenSUSECrash when handling long CNAME response in net7.5 Highgo1.25-opensslopenSUSEJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgo1.25-opensslopenSUSEUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgo1.25-opensslopenSUSEUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgo1.25-opensslopenSUSETOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgo1.25-opensslopenSUSEInefficient policy validation in crypto/x5097.5 Highgo1.25-opensslopenSUSEUnexpected work during chain building in crypto/x5097.5 Highgo1.25-opensslopenSUSEMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 Highgo1.25-opensslopenSUSEMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgo1.25-opensslopenSUSECode execution vulnerability in SWIG code generation in cmd/go8.8 Highgo1.25-opensslopenSUSEURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgo1.25-opensslopenSUSEFileInfo can escape from a Root in os2.5 Lowgo1.25-opensslopenSUSEIncorrect parsing of IPv6 host literals in net/url7.5 Highgo1.25-opensslopenSUSEPotential code smuggling via doc comments in cmd/cgo8.6 Highgo1.25-opensslopenSUSEUnexpected session resumption in crypto/tls10.0 Criticalgo1.25-opensslopenSUSEArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgo1.25-opensslopenSUSEUnexpected code execution when invoking toolchain in cmd/go7.0 Highgo1.25-opensslopenSUSEHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgo1.25-opensslopenSUSEExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgo1.25-opensslopenSUSEMemory exhaustion in query parameter parsing in net/url7.5 Highgo1.25-opensslopenSUSEImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgo1.25-opensslopenSUSEExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgo1.25-opensslopenSUSEExcessive CPU consumption in ParseAddress in net/mail7.5 Highgo1.25-opensslopenSUSEExcessive CPU consumption in Reader.ReadResponse in net/textproto5.3 Mediumgo1.25-opensslopenSUSEQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgo1.25-opensslopenSUSEALPN negotiation error contains attacker controlled information in crypto/tls5.3 Mediumgo1.25-opensslopenSUSEPanic when validating certificates with DSA public keys in crypto/x5097.5 High- Show olderLoading…