Summary
delve
[1.4.1-1.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)
[1.4.1-1]
- Rebase to 1.4.1
- Resolves: rhbz#1821281
- Related: rhbz#1820596
[1.4.0-2]
- Change i686 to a better macro
- Related: rhbz#1820596
[1.4.0-1]
- Rebase to 1.4.0
- Remove Patch1781
- Related: rhbz#1820596
[1.3.2-3]
- Resolves: rhbz#1758612
- Resolves: rhbz#1780554
- Add patch: 1781-pkg-terminal-Fix-exit-status.patch
[1.3.2-2]
- Added tests
- Related: rhbz#1758612
[1.3.2-1]
- First package for RHEL
- Related: rhbz#1758612
golang
[1.14.12-1]
- Rebase to 1.14.12
- Resolves: rhbz#1898829
- Resolves: rhbz#1898832
- Resolves: rhbz#1898834
[1.14.10-1]
- Rebase to 1.14.10
- Remove patch to fix missing deferreturn on linux/ppc64le rhbz#1854836
- Resolves: rhbz#1897181
- Resolves: rhbz#1897182
- Resolves: rhbz#1897185
go-toolset
[1.14.12-1]
- Rebase to 1.14.12
- Resolves: rhbz#1898829
- Resolves: rhbz#1898832
- Resolves: rhbz#1898834
[1.14.10-1]
- Rebase to 1.14.10
- Resolves: rhbz#1897181
- Resolves: rhbz#1897182
- Resolves: rhbz#1897185
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.4.1-1.0.1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | go-toolset | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-bin | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-docs | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-misc | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-race | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-src | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
| Oracle Linux · 8 | golang-tests | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab |
Vulnerabilities 4
-
Unscored —
Cross-site scripting in net/http/cgi and net/http/fcgi
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
-
Unscored —
Panic during division of very large numbers in math/big
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
-
Unscored —
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
-
Unscored —
Arbitrary code execution via the go command with cgo in cmd/go
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.