go1.26-openssl vulnerabilities (openSUSE)
41 vulnerabilities.
go1.26-opensslopenSUSEFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 Highgo1.26-opensslopenSUSEIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 Highgo1.26-opensslopenSUSELimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgo1.26-opensslopenSUSEAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgo1.26-opensslopenSUSEAdd recursion depth guard during decode in encoding/xml7.5 Highgo1.26-opensslopenSUSEFix Javascript regexp context tracking in html/template6.1 Mediumgo1.26-opensslopenSUSEApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgo1.26-opensslopenSUSEEnforce maximum recursion depth in encoding/asn17.5 Highgo1.26-opensslopenSUSEInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgo1.26-opensslopenSUSERoot escape via symlink plus trailing slash in os7.8 Highgo1.26-opensslopenSUSEArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgo1.26-opensslopenSUSEQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgo1.26-opensslopenSUSEInefficient candidate hostname parsing in crypto/x5096.5 Mediumgo1.26-opensslopenSUSEMalicious module proxy can bypass checksum database in cmd/go7.5 Highgo1.26-opensslopenSUSEQuadratic string concatenation in consumePhrase in net/mail7.5 Highgo1.26-opensslopenSUSEPanic in Dial and LookupPort when handling NUL byte on Windows in net7.5 Highgo1.26-opensslopenSUSEEscaper bypass leads to XSS in html/template6.1 Mediumgo1.26-opensslopenSUSEReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgo1.26-opensslopenSUSEBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgo1.26-opensslopenSUSEQuadratic string concatentation in consumeComment in net/mail7.5 Highgo1.26-opensslopenSUSEInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgo1.26-opensslopenSUSEInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgo1.26-opensslopenSUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgo1.26-opensslopenSUSECrash when handling long CNAME response in net7.5 Highgo1.26-opensslopenSUSECase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2 Highgo1.26-opensslopenSUSEJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgo1.26-opensslopenSUSEUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgo1.26-opensslopenSUSEUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgo1.26-opensslopenSUSETOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgo1.26-opensslopenSUSEInefficient policy validation in crypto/x5097.5 Highgo1.26-opensslopenSUSEUnexpected work during chain building in crypto/x5097.5 Highgo1.26-opensslopenSUSEMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 Highgo1.26-opensslopenSUSEMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgo1.26-opensslopenSUSECode execution vulnerability in SWIG code generation in cmd/go8.8 Highgo1.26-opensslopenSUSEURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgo1.26-opensslopenSUSEFileInfo can escape from a Root in os2.5 Lowgo1.26-opensslopenSUSEIncorrect parsing of IPv6 host literals in net/url7.5 Highgo1.26-opensslopenSUSEPanic in name constraint checking for malformed certificates in crypto/x5095.9 Mediumgo1.26-opensslopenSUSEIncorrect enforcement of email constraints in crypto/x5097.5 Highgo1.26-opensslopenSUSERequest smuggling due to acceptance of invalid chunked data in net/http9.1 Criticalgo1.26-opensslopenSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical