CVE-2019-16276
Fixed in a distro release EPSS 5%
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
Products: golang go, debian_linux, opensuse leap, fedoraproject fedora, redhat openshift_container_platform, redhat developer_tools, redhat enterprise_linux, redhat enterprise_linux_eus, netapp cloud_insights_telegraf_agent
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | stdlib | 1.12.10 |
| Go | stdlib | 1.13.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | golang | 1.9.4-3.amzn2.0.3 |
| Amazon Linux 2 | golang-bin | 1.9.4-3.amzn2.0.3 |
| Amazon Linux 2 | golang-docs | 1.9.4-3.amzn2.0.3 |
| Amazon Linux 2 | golang-misc | 1.9.4-3.amzn2.0.3 |
| Amazon Linux 2 | golang-src | 1.9.4-3.amzn2.0.3 |
| Amazon Linux 2 | golang-tests | 1.9.4-3.amzn2.0.3 |
| Arch Linux | go | 2:1.13.1-1 |
| Debian 10 | golang-1.11 | 1.11.6-1+deb10u2 |
| Debian 9 | golang-1.7 | 1.7.4-2+deb9u3 |
| Debian 9 | golang-1.8 | 1.8.1-1+deb9u3 |
| Red Hat devtools 2019 | go-toolset-1.12 | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-build | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-bin | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-docs | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-misc | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-race | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-src | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-golang-tests | 0:1.12.12-4.el7 |
| Red Hat devtools 2019 | go-toolset-1.12-runtime | 0:1.12.12-4.el7 |
| Red Hat Enterprise Linux 8 | go-toolset | 0:1.12.12-2.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-bin | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-docs | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-misc | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-race | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-src | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat Enterprise Linux 8 | golang-tests | 0:1.12.12-4.module+el8.1.0+5317+8a49ffbb |
| Red Hat openshift 4.2 | atomic-enterprise-service-catalog | 1:4.2.4-201911041319.git.1.1de4bcd.el7 |
| Red Hat openshift 4.2 | atomic-enterprise-service-catalog-svcat | 1:4.2.4-201911041319.git.1.1de4bcd.el7 |
| Red Hat openshift 4.2 | atomic-openshift-service-idler | 0:4.2.4-201911041319.git.1.4131c2f.el7 |
| Red Hat openshift 4.2 | openshift | 0:4.2.4-201911041319.git.0.c7d2111.el8 |
| Red Hat openshift 4.2 | openshift | 0:4.2.4-201911041319.git.0.c7d2111.el7 |
| Red Hat openshift 4.2 | openshift-clients | 0:4.2.4-201911010432.git.1.30c33a5.el8 |
| Red Hat openshift 4.2 | openshift-clients | 0:4.2.4-201911010432.git.1.30c33a5.el7 |
| Red Hat openshift 4.2 | openshift-clients-redistributable | 0:4.2.4-201911010432.git.1.30c33a5.el8 |
| Red Hat openshift 4.2 | openshift-clients-redistributable | 0:4.2.4-201911010432.git.1.30c33a5.el7 |
| Red Hat openshift 4.2 | openshift-enterprise-autoheal | 0:4.2.4-201911010432.git.1.0b5cd44.el7 |
| Red Hat openshift 4.2 | openshift-hyperkube | 0:4.2.4-201911041319.git.0.c7d2111.el7 |
| Red Hat openshift 4.2 | openshift-hyperkube | 0:4.2.4-201911041319.git.0.c7d2111.el8 |
| Ubuntu 14.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.6 | no fix |
| Ubuntu 18.04 LTS | golang-1.10 | no fix |
| Ubuntu 18.04 LTS | golang-1.8 | no fix |
| Ubuntu 18.04 LTS | golang-1.9 | no fix |
| openSUSE Leap 15.0 | go1.12 | 1.12.12-lp150.11.1 |
| openSUSE Leap 15.1 | go1.12 | 1.12.12-lp151.2.25.1 |
| openSUSE Tumbleweed | go1.12 | 1.12.17-4.8 |
| openSUSE Tumbleweed | go1.13 | 1.13.15-2.6 |