Summary
go-toolset
[1.11.5-2]
- Include patch to fix CVE-2019-9741
- Resolves: rhbz#1690443
golang
[1.11.5-2]
- Include patch to fix CVE-2019-9741
- Resolves: rhbz#1690443
[1.11.5-2]
- Switch to pagure fork for Go FIPS
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | go-toolset | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-bin | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-docs | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-misc | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-race | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-src | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
| Oracle Linux · 8 | golang-tests | 0:1.11.5-2.module+el8.0.0+5230+75360568 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, …