MGASA-2022-0231

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0231.html

Import Source

https://advisories.mageia.org/MGASA-2022-0231.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2022-0231

Related

CVE-2022-30629

Published

2022-06-16T21:05:59Z

Modified

2022-06-16T19:39:40Z

Summary

Updated golang packages fix security vulnerability

Details

crypto/tls: session tickets lack random ticketageadd. Session tickets generated by crypto/tls did not contain a randomly generated ticketageadd. This allows an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption. (CVE-2022-30629)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / golang

Package

Name: golang
Purl: pkg:rpm/mageia/golang?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.11-1.mga8

Ecosystem specific

{
    "section": "core"
}