1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2024-0d4d9925a2

[FEDORA-2024-0d4d9925a2] Fedora 38: golang-github-tdewolff-argp, golang-github-tdewolff-parse, golang-github-tdewolff-minify

Severity High
Affected Packages 3
CVEs 1
Info Packages References Vulnerabilities

Update to latest version
Security fix for CVE-2023-39325

Package Affected Version
pkg:rpm/fedora/golang-github-tdewolff-parse?distro=fedora-38 < 2.7.12.1.fc38
pkg:rpm/fedora/golang-github-tdewolff-minify?distro=fedora-38 < 2.20.18.1.fc38
pkg:rpm/fedora/golang-github-tdewolff-argp?distro=fedora-38 < 0.0.1.20240227git719bbce.fc38
ID
FEDORA-2024-0d4d9925a2
Severity
high
Severity from
CVE-2023-39325
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0d4d9925a2
Published
2024-03-07T01:50:44
(6 months ago)
Modified
2024-03-07T01:50:44
(6 months ago)
Rights
Copyright 2024 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2248340 Bug #2248340 - golang-github-tdewolff-minify: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2248340
Bugzilla 2245375 Bug #2245375 - golang-github-tdewolff-minify-2.20.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2245375
Bugzilla 2246794 Bug #2246794 - golang-github-tdewolff-parse-2.7.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=2246794
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/golang-github-tdewolff-parse?distro=fedora-38 fedora golang-github-tdewolff-parse < 2.7.12.1.fc38 fedora-38
Affected pkg:rpm/fedora/golang-github-tdewolff-minify?distro=fedora-38 fedora golang-github-tdewolff-minify < 2.20.18.1.fc38 fedora-38
Affected pkg:rpm/fedora/golang-github-tdewolff-argp?distro=fedora-38 fedora golang-github-tdewolff-argp < 0.0.1.20240227git719bbce.fc38 fedora-38
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date