FEDORA-CONTAINER-2019-8b04b1c212 — security update for golang

stable

golang-1.11-6.fc29

FEDORA-CONTAINER-2019-8b04b1c212 created by jcajka 5 years ago for Fedora 29 Containers

Rebase to go1.11.4
Security fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873

This update has been submitted for testing by jcajka.

5 years ago

This update has been pushed to testing.

5 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for batched by jcajka.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

Container

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

golang-1.11-6.fc29

BZ#1657563 CVE-2018-16873 golang: "go get" command vulnerable to RCE via import of malicious package

BZ#1657564 CVE-2018-16874 golang: "go get" vulnerable to directory traversal via malicious package

BZ#1657565 CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate

BZ#1659288 CVE-2018-16873 golang: "go get" command vulnerable to RCE via import of malicious package [fedora-all]

BZ#1659289 CVE-2018-16874 golang: "go get" vulnerable to directory traversal via malicious package [fedora-all]

BZ#1659290 CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate [fedora-all]

golang-1.11-6.fc29

Automated Test Results

ignored