stable

golang-1.20.10-3.el7

FEDORA-EPEL-2023-1c906d04ee created by dwd a year ago for Fedora EPEL 7

Security fix for CVE-2023-39320, CVE-2023-39318, CVE-2023-39321, CVE-2023-39322, CVE-2023-39323

This update has been submitted for testing by dwd.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

This update has been pushed to testing.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
0
Signed
Content Type
RPM
Test Gating
Builds
1
golang-1.20.10-3.el7
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
7 days
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
approved
a year ago
BZ#2237775 CVE-2023-39320 golang: cmd/go: go.mod toolchain directive allows arbitrary execution
0
0
BZ#2237776 CVE-2023-39318 golang: html/template: improper handling of HTML-like comments within script contexts
0
0
BZ#2237777 CVE-2023-39321 golang: crypto/tls: panic when processing post-handshake message on QUIC connections
0
0
BZ#2237778 CVE-2023-39322 golang: crypto/tls: lack of a limit on buffered post-handshake
0
0
BZ#2238804 CVE-2023-39320 golang: cmd/go: go.mod toolchain directive allows arbitrary execution [epel-all]
0
0
BZ#2238806 CVE-2023-39318 golang: html/template: improper handling of HTML-like comments within script contexts [epel-all]
0
0
BZ#2238808 CVE-2023-39321 golang: crypto/tls: panic when processing post-handshake message on QUIC connections [epel-all]
0
0
BZ#2238811 CVE-2023-39322 golang: crypto/tls: lack of a limit on buffered post-handshake [epel-all]
0
0
BZ#2242544 CVE-2023-39323 golang: cmd/go: line directives allows arbitrary execution during build
0
0
BZ#2243693 CVE-2023-39323 golang: cmd/go: line directives allows arbitrary execution during build [epel-all]
0
0
golang-1.20.10-3.el7

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.2.0 on bodhi-web-172-m8wzp.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •