Summary
[1.20.12-4]
- Rebuild for z-stream
- Related: RHEL-28939
[1.20.12-3]
- Fix CVE-2023-45288
- Resolves: RHEL-28939
- Temporarily disable FIPS tests (RHELBLD-14822)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | go-toolset | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang-bin | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang-docs | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang-misc | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang-src | 0:1.20.12-4.el9_3 |
| Oracle Linux · 9 | golang-tests | 0:1.20.12-4.el9_3 |
Vulnerabilities 1
-
High 7.5
HTTP/2 CONTINUATION flood in net/http
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…