Important: go-toolset:ol8addon security update (Oracle Linux 8)

Summary

Fixed packages 9

Vulnerabilities 4

• Unscored —
  CVE-2022-23772

  Uncontrolled memory consumption in math/big

  Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

  golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022
• Unscored —
  CVE-2022-23773 Public exploit

  Incorrect access control in the go command in cmd/go/internal/modfetch

  cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

  golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022
• Unscored —
  CVE-2022-23806

  Incorrect computation for some invalid field elements in crypto/elliptic

  Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

  golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022
• Unscored —
  CVE-2022-24921

  Stack exhaustion when compiling deeply nested expressions in regexp

  regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

  golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  Mar 5, 2022