Summary
[1.26.5-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var
[1.26.5-1]
- Update to Go 1.26.5 (fips-1)
- Resolves: RHEL-193476
[1.25.7-1]
- Update to Go 1.25.7 (fips-1)
- Resolves: RHEL-146452
[1.25.5-1]
- Update to Go 1.25.5 (fips-1)
- Resolves: RHEL-139364
[1.25.3-2]
- Cleanup lib/ ownership
[1.25.3-1]
- Update to Go 1.25.3
- Resolves: RHEL-121220
[1.25.1-1]
- Update to Go 1.25.1
- Resolves: RHEL-116850
[1.25.0-2]
- Revert DWARF5 defaults
- Add elf5 to rpminspect.yaml
- Related: RHEL-109557
[1.25.0-1]
- Update to Go 1.25.0
- Set GOAMD64 to v2 to align with new architecture baselines
- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
- Resolves: RHEL-109557
[1.24.6-1]
- Update to Go 1.24.6 (fips-1)
- Resolves: RHEL-106461
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | go-toolset | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-bin | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-docs | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-misc | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-race | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-src | 0:1.26.5-1.0.1.el9_8 |
| Oracle Linux · 9 | golang-tests | 0:1.26.5-1.0.1.el9_8 |
Vulnerabilities 2
-
Critical 9.6
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege …
-
High 7.8
Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even whe…