Threat Intelligence Database

Multiple security vulnerabilities have been identified in the goose component of Red Hat Enterprise Linux 10. These include arbitrary command execution via malicious Git configuration, token impersonation due to missing OAuth resource field validation, denial of service through unauthenticated session table leak, and denial of service via crafted Certificate Revocation List. A security update is available that addresses these issues by updating goose to version 1.45.0-1.el10_2. The update is applicable to Red Hat Enterprise Linux 10 on multiple architectures including x86_64, s390x, ppc64le, and aarch64.

Multiple security vulnerabilities have been identified in the 'goose' component of Red Hat Enterprise Linux 9, including arbitrary command execution, token impersonation, and denial of service issues. These vulnerabilities are addressed by updating goose to version 1.45 in Red Hat Enterprise Linux 9.8.z. The update is available for multiple architectures including x86_64, s390x, ppc64le, and aarch64. Users should apply the update following Red Hat's guidance to remediate these issues.