FEDORA-EPEL-2022-f64d777807 — security update for golang

stable

golang-1.17.7-1.el7

FEDORA-EPEL-2022-f64d777807 created by dwd 2 years ago for Fedora EPEL 7

Update to 1.17.7, including fixes for CVE-2021-29923, CVE-2021-43565, CVE-2022-23806, CVE-2022-23772, and CVE-2022-23773

This update has been submitted for testing by dwd.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

dwd edited this update.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

golang-1.17.7-1.el7

BZ#1992006 CVE-2021-29923 golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

BZ#1992007 CVE-2021-29923 golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet [epel-all]

BZ#2030787 CVE-2021-43565 golang.org/x/crypto: empty plaintext packet causes panic

BZ#2030788 CVE-2021-43565 golang: golang.org/x/crypto: empty plaintext packet causes panic [epel-all]

BZ#2053429 CVE-2022-23806 golang: crypto/elliptic IsOnCurve returns true for invalid field elements

BZ#2053432 CVE-2022-23806 golang: crypto/elliptic IsOnCurve returns true for invalid field elements [epel-all]

BZ#2053532 CVE-2022-23772 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString

BZ#2053533 CVE-2022-23772 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString [epel-all]

BZ#2053541 CVE-2022-23773 golang: cmd/go: misinterpretation of branch names can lead to incorrect access control

BZ#2053542 CVE-2022-23773 golang: cmd/go: misinterpretation of branch names can lead to incorrect access control [epel-all]

golang-1.17.7-1.el7

Automated Test Results

ignored