Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15 | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-build | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-bin | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-docs | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-misc | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-race | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-src | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-golang-tests | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-runtime | 0:1.15.13-1.el7_9 |
| Red Hat · Devtools 2021 devtools:2021 | go-toolset-1.15-scldevel | 0:1.15.13-1.el7_9 |
Vulnerabilities 1
-
Unscored —
Panic when reading certain archives in archive/zip
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.15.7_toolset
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1965503
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2634.json
-
report
https://access.redhat.com/security/cve/CVE-2021-33196
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-33196
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-33196
-
article
https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI