Summary
delve
[1.21.2-3.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)
[1.21.2-3]
- Skip an additional test as it's breaking in the CI system.
- Modify the name of the patch.
- Resolves: RHEL-22820
[1.21.2-2]
- Fix: Remove architectures from exclude ExcludeArch
- Resolves: RHEL-22820
[1.21.2-1]
- Rebase to 1.21.2
- Add support for ppc64le and aarch64
- Enable the test suite
- Modify ports: Some CI systems complain about the usage of the 8888 port.
- Improve the way PPC64LE support is enabled.
- Resolves: RHEL-22820
golang
[1.21.11-1]
- Update to Go1.21.11 to address CVE-2024-24789 and CVE-2024-24790
- Resolves: RHEL-40274
[1.21.10]
- Update to Go 1.21.10
- Resolves: RHEL-36993
go-toolset
[1.21.11-1]
- Rebase to Go1.21.11 that includes fixes for CVE-2024-24789 and CVE-2024-24790
- Resolves: RHEL-40274
[1.21.10-1]
- Update to Go 1.21.10
- Resolves: RHEL-36993
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | delve | 0:1.21.2-3.0.1.module+el8.10.0+90307+cdf2b281 |
| Oracle Linux · 8 | go-toolset | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang-bin | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang-docs | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang-misc | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang-src | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
| Oracle Linux · 8 | golang-tests | 0:1.21.11-1.module+el8.10.0+90357+32bea22c |
Vulnerabilities 2
-
Critical 9.8
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
-
Medium 5.3
Mishandling of corrupt central directory record in archive/zip
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…