Описание
ELSA-2025-8478: go-toolset:ol8 security update (MODERATE)
delve [1.24.1-1.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)
golang [1.23.9-1]
- Update to Go 1.23.9
- Resolves: RHEL-94636
go-toolset [1.23.9-1]
- Update to Go 1.23.9
- Resolves: RHEL-94636
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module go-toolset:ol8 is enabled
delve
1.24.1-1.0.1.module+el8.10.0+90602+3daf471e
go-toolset
1.23.9-1.module+el8.10.0+90602+3daf471e
golang
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-bin
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-docs
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-misc
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-src
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-tests
1.23.9-1.module+el8.10.0+90602+3daf471e
Oracle Linux x86_64
Module go-toolset:ol8 is enabled
delve
1.24.1-1.0.1.module+el8.10.0+90602+3daf471e
go-toolset
1.23.9-1.module+el8.10.0+90602+3daf471e
golang
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-bin
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-docs
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-misc
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-src
1.23.9-1.module+el8.10.0+90602+3daf471e
golang-tests
1.23.9-1.module+el8.10.0+90602+3daf471e
Связанные CVE
Связанные уязвимости
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
The net/http package improperly accepts a bare LF as a line terminator ...