Summary
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
* golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | delve | 0:1.5.0-2.module+el8.4.0+396+d2d16ae3 |
| Rocky Linux · 8 | go-toolset | 0:1.15.14-2.module+el8.4.0+646+fc1a61b2 |
| Rocky Linux · 8 | golang | 0:1.15.14-2.module+el8.4.0+646+fc1a61b2 |
Vulnerabilities 1
-
Unscored —
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1992006