Summary
delve
[1.5.0-2.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)
[1.5.0-2]
- Add golang-1.15.4 related patch
- Resolves: rhbz#1901189
[1.5.0-1]
- Rebase to 1.5.0
- Related: rhbz#1870531
golang
[1.15.7-1]
- Rebase to 1.15.7
- Resolves: rhbz#1870531
- Resolves: rhbz#1919261
[1.15.5-1]
- Rebase to 1.15.5
- Resolves: rhbz#1898652
- Resolves: rhbz#1898660
- Resolves: rhbz#1898649
[1.15.3-2]
- fix typo in patch file name
- Related: rhbz#1881539
[1.15.3-1]
- Rebase to 1.15.3
- fix x/text infinite loop
- Resolves: rhbz#1881539
[1.15.2-2]
- Resolves: rhbz#1850045
[1.15.2-1]
- Rebase to 1.15.2
- fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
- Resolves: rhbz#1872622
- add net/http graceful shutdown patch
- Resolves: rhbz#1888673
- add x509warnCN patch
- Resolves: rhbz#1889437
[1.15.0-1]
- Rebase to 1.15.0
- Related: rhbz#1870531
go-toolset
[1.15.7-1]
- Rebase to 1.15.7
- Resolves: rhbz#1870531
- Resolves: rhbz#1919261
[1.15.5-1]
- Rebase to 1.15.5
- Resolves: rhbz#1898652
- Resolves: rhbz#1898660
- Resolves: rhbz#1898649
[1.15.3-1]
- Rebase to 1.15.3
- fix x/text infinite loop
- Resolves: rhbz#1881539
[1.15.2-1]
- Rebase to 1.15.2
- Related: rhbz#1870531
- Related: rhbz#1872622
- Related: rhbz#1888673
- Related: rhbz#1889437
- Related: rhbz#1891095
[1.15.0-1]
- Rebase to 1.15.0
- Related: rhbz#1870531
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.5.0-2.0.1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | go-toolset | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-bin | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-docs | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-misc | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-race | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-src | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
| Oracle Linux · 8 | golang-tests | 0:1.15.7-1.module+el8.4.0+20021+8a86d991 |
Vulnerabilities 2
-
Unscored —
Incorrect operations on the P-224 curve in crypto/elliptic
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
-
Unscored —
Arbitrary code injection via the go command with cgo on Windows in cmd/go
Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).