Skip to content
OpenAdvisories
High ELSA-2023-18908 8 CVEs

Important: ol8addon security update (Oracle Linux 8)

Published Mar 7, 2023 · Updated Mar 7, 2023

Summary

delve
[1.9.1-1.0.1]
- Bump version of delve from 1.8.3 to 1.9.1

[1.8.3-1.0.1]
- Bump version of delve from 1.7.2 to 1.8.3

[1.7.2-1.0.1]
- Bump version of delve from 1.6.0 to 1.7.2, enable aarch64

[1.6.0-1.0.1]
- Bump upstream version of delve from 1.5.0 to 1.6.0

[1.5.0-2.0.1]
- Cherry pick 05508ea98055bcb5418d2dc83893af4eb044d151:
+ Disable DWARF compression which has issues (Alex Burmashev)
+ By David Sloboda <david.x.sloboda@oracle.com>

[1.5.0-2]
- Add golang-1.15.4 related patch
- Resolves: rhbz#1901189

[1.5.0-1]
- Rebase to 1.5.0
- Related: rhbz#1870531

[1.4.1-1]
- Rebase to 1.4.1
- Resolves: rhbz#1821281
- Related: rhbz#1820596

[1.4.0-2]
- Change i686 to a better macro
- Related: rhbz#1820596

[1.4.0-1]
- Rebase to 1.4.0
- Remove Patch1781
- Related: rhbz#1820596

[1.3.2-3]
- Resolves: rhbz#1758612
- Resolves: rhbz#1780554
- Add patch: 1781-pkg-terminal-Fix-exit-status.patch

[1.3.2-2]
- Added tests
- Related: rhbz#1758612

[1.3.2-1]
- First package for RHEL
- Related: rhbz#1758612

golang
[1.19.4-2.0.1]
- Rebase to 1.19.4 openssl-fips
- Removed patches:
Patch215: go1.5-zoneinfo_testing_only.patch (upstream commit 946587811423)
Patch226: disable_static_external_tests.patch (included in new patches)
Patch51852: disable-crypto-x509-test.patch (no longer needed)
- Added patches:
Patch0001: disable_static_tests_part1.patch (part of old patch 226)
Patch0002: disable_static_tests_part2.patch (part of old patch 226)
Patch0003: fix-test-1024-leaf-certs.patch (fixes change in openssl-fips patches)
Patch0004: fix-memory-leak-evp-sign-verify.patch (fixes openssl-fips patches)
- Remove disabling of ED25519 test, it is done in the openssl-fips patches
- Remove use of extra source for binary file patching
- Remove AUTHORS and CONTRIBUTORS from doc section, they were removed upstream,
in golang issue 53961
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.19.4-2]
- Fix memory leaks in EVP_{sign,verify}_raw
- Resolves: rhbz#2132767

[1.19.4-1]
- Rebase to Go 1.19.4
- Fix ppc64le linker issue
- Remove defunct patches
- Remove downstream generated FIPS mode patches
- Add golang-fips/go as the source for FIPS mode patches
- Resolves: rhbz#2144542

[1.18.8-1.0.1]
- Rebase to 1.18.8 by adding upstream patches to the 1.18.0 openssl-fips
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.19.2-4]
- Enable big endian support in FIPS mode
- Resolves: rhbz#1969844

[1.19.2-3]
- Restore old HashSign/HashVerify API
- Resolves: rhbz#2132730

[1.19.2-2]
- Add support for 4096 bit keys in x509
- Resolves: rhbz#2132694

[1.19.2-1]
- Rebase to Go 1.19.2
- Resolves: rhbz#2132730

[1.19.1-2]
- Rebase to Go 1.19.1
- Resolves: rhbz#2131026

[1.18.3-1.0.1]
- Rebase to 1.18.3 by adding upstream patches to the 1.18.0 openssl-fips
- Modify Patch51852 to remove portions already upstream
- Use base_version to distinguish the version of the tarball from the
final version
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.18.1-2.0.1]
- Rebase to 1.18.0 openssl-fips
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.17.10-1.0.1]
- Add patches between Go 1.17.7 and Go 1.17.10
- Rename base_versn to base_version
- Remove unneeded patches from previous version
- Remove Patch2028662 because that patch is also upstream now
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.18.0-2]
- Enable SHA1 in some contexts
- Related: rhbz#2075162

[1.18.0-1]
- Update Go to 1.18.0
- Resolves: rhbz#2075162

[1.17.7-1]
- Rebase to Go 1.17.7
- Remove fips memory leak patch (fixed in tree)
- Resolves: rhbz#2015930

[1.17.5-1.0.1]
- Rebase to 1.17.2 fips. Update to 1.17.5.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[1.17.5-1]
- Rebase to Go 1.17.5
- Remove vdso_s390x_gettime patch
- Resolves: rhbz#2031112
- Related: rhbz#2028570

[1.17.4-1]
- Rebase Go to 1.17.4
- Add remove_waitgroup_misuse_tests patch
- Related: rhbz#2014088
- Resolves: rhbz#2028570
- Resolves: rhbz#2022828
- Resolves: rhbz#2024686
- Resolves: rhbz#2028662

[1.17.2-2]
- Resolves: rhbz#2014704

[1.17.2-1]
- Rebase to Go 1.17.2
- Related: rhbz#2014088
- Remove golang-1.15-warnCN.patch
- Remove reject-leading-zeros.patch
- Remove favicon.ico and robots.txt references
- Exclude TestEd25519Vectors test

[1.16.9-1.0.1]
- Rebase to 1.16.7 fips, and add patches to bring up to 1.16.9

[1.16.7-1]
- Rebase to Go 1.16.7
- Resolves: rhbz#1994079
- Add reject leading zeros patch
- Resolves: rhbz#1993314

[1.16.6-2]
- Fix TestBoringServerCurves failure when run by itself
- Resolves: rhbz#1976168

[1.16.6-1]
- Rebase to go-1.16.6-1-openssl-fips
- Resolves: rhbz#1982281
- Addresses CVE-2021-34558

[1.16.5-1]
- Rebase to 1.16.5
- Removes rhbz#1955032 patch, it's already included in this release
- Removes rhbz#1956891 patch, it's already included in this release
- Related: rhbz#1979677
- Related: rhbz#1968738
- Related: rhbz#1972420

[1.16.4-3]
- Fix zero-size allocation memory leak.
- Related: rhbz#1951877

[1.16.4-2]
- Resolves: rhbz#1951877

[1.16.4-1]
- Rebase to go-1.16.4-1-openssl-fips

[1.16.1-3]
- Resolves: rhbz#1956891

[1.16.1-2]
- Resolves: rhbz#1955032

[1.16.1-1]
- Rebase to go-1.16.1-2-openssl-fips
- Resolves: rhbz#1938071
- Adds a workaround for rhbz#1939923
- Removes Patch224, it's on upstream -> rhbz#1888673
- Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238
- Removes old patches for cleaning purposes

[1.15.10-1]
- Use patches to update version 1.15.7 to 1.15.10

[1.15.7-1]
- Rebase to 1.15.7
- Resolves: rhbz#1870531
- Resolves: rhbz#1919261

[1.15.5-1]
- Rebase to 1.15.5
- Resolves: rhbz#1898652
- Resolves: rhbz#1898660
- Resolves: rhbz#1898649

[1.15.3-2]
- fix typo in patch file name
- Related: rhbz#1881539

[1.15.3-1]
- Rebase to 1.15.3
- fix x/text infinite loop
- Resolves: rhbz#1881539

[1.15.2-2]
- Resolves: rhbz#1850045

[1.15.2-1]
- Rebase to 1.15.2
- fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
- Resolves: rhbz#18726

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 8 delve 0:1.9.1-1.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 go-toolset 0:1.19.4-1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-bin 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-docs 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-misc 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-race 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-src 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba
Oracle Linux · 8 golang-tests 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba

Vulnerabilities 8