Summary
[1.25.8-1]
- Update to Go 1.25.8 (fips-1)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | go-toolset | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-bin | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-docs | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-misc | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-race | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-src | 0:1.25.8-1.el10_1 |
| Oracle Linux · 10 | golang-tests | 0:1.25.8-1.el10_1 |
Vulnerabilities 2
-
High 7.8
Arbitrary file write using cgo pkg-config directive in cmd/go
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config com…
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.