Linux · Ubuntu · Package update · April 6, 2023

golang-1.18-src 1.18.1-1ubuntu1~18.04.4: golang-1.18-src 1.18.1-1ubuntu1~18.04.4 for Ubuntu 18.04.6 LTS (bionic)

golang-1.18-src 1.18.1-1ubuntu1~18.04.4, released April 6, 2023, fixes 20 CVEs in golang-1.18-src. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
20
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0620
93rd percentile

Priority of the 20 CVEs

Patch now 0 Urgent 0 High 20 Routine 0

Fixed package versions

ProductReleaseFixed in
golang-1.18-srcUbuntu 18.04.6 LTS (bionic)1.18.1-1ubuntu1~18.04.4

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-41717 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0620 None reported
High CVE-2022-27664 golang-1.13: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 c...7.5 0.0349 None reported
High CVE-2022-29526 golang-1.18: Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment7.5 0.0295 None reported
High CVE-2022-32189 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0278 None reported
High CVE-2022-28131 golang-1.13-go: Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a...7.5 0.0256 None reported
High CVE-2023-24538 delve: RHSA-2023:3319: go-toolset:rhel8 security update (Important)9.8 0.0228 None reported
High CVE-2022-30633 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0221 None reported
High CVE-2022-30630 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0219 None reported
High CVE-2022-30632 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0219 None reported
High CVE-2022-30631 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0219 None reported
High CVE-2022-2879 aardvark-dns: ELSA-2024-0121: container-tools:4.0 security update (MODERATE)7.5 0.0201 None reported
High CVE-2022-30635 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0192 None reported
High CVE-2023-24534 aardvark-dns: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-294009.8 0.0189 None reported
High CVE-2022-41715 golang-github-prometheus-prometheus: [SECURITY] Limit memory used by parsing regexps7.5 0.0173 None reported
High CVE-2022-1705 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0153 None reported
High CVE-2022-32148 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0152 None reported
High CVE-2023-24537 golang-src: RHSA-2023:3319: go-toolset:rhel8 security update (Important)9.8 0.0141 None reported
High CVE-2022-2880 aardvark-dns: ELSA-2024-3254: container-tools:ol8 security update (IMPORTANT)7.5 0.0141 None reported
High CVE-2022-30629 aardvark-dns: ELSA-2023-2758: container-tools:ol8 security, bug fix, and enhancement update (MODERATE)7.5 0.0121 None reported
High CVE-2022-1962 aardvark-dns: ELSA-2023-2802: container-tools:4.0 security and bug fix update (MODERATE)7.5 0.0092 None reported
Showing 1 to 20 of 20 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.