Summary
[1.26.4-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var
[1.26.4-1]
- Update to Go 1.26.4 (fips-1)
- Resolves: RHEL-183349
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | go-toolset | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-bin | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-docs | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-misc | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-race | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-src | 0:1.26.4-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-tests | 0:1.26.4-1.0.1.el9_8 |
Vulnerabilities 1
-
Medium 5.3
Arbitrary inputs are included in errors without any escaping in net/textproto
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.