Summary
[1.26.2-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var
[1.26.2-1]
- Update to Go 1.26.2 (fips-2)
- Resolves: RHEL-169929
[1.26.1-1]
- Update to Go 1.26.1
- Resolves: RHEL-153434
[1.25.7-1]
- Update to Go 1.25.7 (fips-1)
- Resolves: RHEL-146452
[1.25.5-1]
- Update to Go 1.25.5 (fips-1)
- Resolves: RHEL-139364
[1.25.3-2]
- Cleanup lib/ ownership
[1.25.3-1]
- Update to Go 1.25.3
- Resolves: RHEL-121220
[1.25.1-1]
- Update to Go 1.25.1
- Resolves: RHEL-116850
[1.25.0-2]
- Revert DWARF5 defaults
- Add elf5 to rpminspect.yaml
- Related: RHEL-109557
[1.25.0-1]
- Update to Go 1.25.0
- Set GOAMD64 to v2 to align with new architecture baselines
- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
- Resolves: RHEL-109557
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | go-toolset | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-bin | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-docs | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-misc | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-race | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-src | 0:1.26.2-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-tests | 0:1.26.2-1.0.1.el9_8 |
Vulnerabilities 2
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
-
High 7.5
Incorrect enforcement of email constraints in crypto/x509
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be…