Summary
[1.26.2-2.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var
[1.26.2-2]
- Do not ignore any tests in check
[1.26.2-1]
- Update to Go 1.26.2 (fips-2)
[1.26.1-1]
- Update to Go 1.26.1
[1.25.7-1]
- Update to Go 1.25.7 (fips-1)
[1.25.5-1]
- Update to Go 1.25.5 (fips-1)
[1.25.3-5]
- gating.yaml: Add tier1 s390x tests
[1.25.3-4]
- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability
[1.25.3-3]
- plans/tier0.fmf: Import plan
[1.25.3-2]
- rpminspect.yaml: Add testdata to annocheck ignore
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | go-toolset | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-bin | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-docs | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-misc | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-race | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-src | 0:1.26.2-2.0.1.el10_2 |
| Oracle Linux · 10 | golang-tests | 0:1.26.2-2.0.1.el10_2 |
Vulnerabilities 2
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
-
High 7.5
Incorrect enforcement of email constraints in crypto/x509
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be…