Test ID:	1.3.6.1.4.1.25623.1.1.2.2024.2437
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-2437)
Summary:	The remote host is missing an update for the Huawei EulerOS 'golang' package(s) announced via the EulerOS-SA-2024-2437 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'golang' package(s) announced via the EulerOS-SA-2024-2437 advisory. Vulnerability Insight: The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.(CVE-2024-24789) Affected Software/OS: 'golang' package(s) on Huawei EulerOS V2.0SP10(x86_64). Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:S/C:N/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-24789 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/ https://go.dev/cl/585397 https://go.dev/issue/66869 https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ https://pkg.go.dev/vuln/GO-2024-2888 http://www.openwall.com/lists/oss-security/2024/06/04/1
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.