Skip to content
OpenAdvisories
Medium ELSA-2019-3433 1 CVE

Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Ecosystem: Oracle Linux

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 go-toolset 0:1.12.8-1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-bin 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-docs 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-misc 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-race 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-src 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5
Oracle Linux · 8 golang-tests 0:1.12.8-2.0.1.module+el8.1.0+5435+cbe0acb5

Vulnerabilities 1

  • Unscored —
    CVE-2019-14809

    Incorrect parsing validation in net/url

    net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() nor Port(), and is related to a no…

    golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go