Summary
golang
[1.18.9-1]
- Update to Go 1.18.9
- Add big-endian.patch
- Increase GO_TEST_TIMEOUT_SCALE due to a Brew issue
- Add do-not-reuse-far-trampolines.patch
- Resolves: rhbz#2149313
[1.18.7-2]
- Fix version mismatch from previous rebase
- Related: rhbz#2136719
[1.18.7-1]
- Update to Go 1.18.7
- Resolves: rhbz#2136719
[1.18.4-2]
- Adds patch for PIE mode issues on PPC64LE
- Resolves: rhbz#2111593
go-toolset
[1.18.9-1]
- Update to Go 1.18.9
- Resolves: rhbz#2149313
[1.18.7-1]
- Update to Go 1.18.7
- Resolves: rhbz#2136719
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.8.3-1.0.1.module+el8.7.0+20775+f27162c3 |
| Oracle Linux · 8 | go-toolset | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-bin | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-docs | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-misc | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-race | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-src | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
| Oracle Linux · 8 | golang-tests | 0:1.18.9-1.module+el8.7.0+20911+27ed6f76 |
Vulnerabilities 3
-
Unscored —
Unbounded memory consumption when reading headers in archive/tar
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of …
-
Unscored —
Incorrect sanitization of forwarded query parameters in net/http/httputil
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. Afte…
-
Unscored —
Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000,…