RLSA-2023:3319

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2023:3319.json

Related

CVE-2023-24540

Published

2023-05-25T17:22:28.202430Z

Modified

2023-05-25T17:23:40.399839Z

Details

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

Rocky Linux:8 / delve

Package

Name: delve

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

0:1.9.1-1.module+el8.8.0+1263+19d1a562

Rocky Linux:8 / golang

Package

Name: golang

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

0:1.19.9-1.module+el8.8.0+1298+7af20600

Rocky Linux:8 / go-toolset

Package

Name: go-toolset

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

0:1.19.9-1.module+el8.8.0+1298+7af20600