Summary
delve
[1.7.2-1.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)
[1.7.2-1]
- Rebase to 1.7.2
- Related: rhbz#2014088
golang
[1.17.10-1]
- Rebase to Go 1.17.10
- Resolves: rhbz#2091077
go-toolset
[1.17.10-1]
- Rebase to Go 1.17.10
- Resolves: rhbz#2091077
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.7.2-1.0.1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux · 8 | go-toolset | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-bin | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-docs | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-misc | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-race | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-src | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
| Oracle Linux · 8 | golang-tests | 0:1.17.10-1.module+el8.6.0+20691+4e76a6d9 |
Vulnerabilities 3
-
Medium 5.3
golang.org/x/sys/unix has Incorrect privilege reporting in syscall
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
-
Unscored —CVE-2022-24675 Public exploit
Stack overflow from a large amount of PEM data in encoding/pem
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
-
Unscored —
Panic due to large inputs affecting P-256 curves in crypto/elliptic
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.