go-toolset:rhel8 security and bug fix update

エラータID: AXSA:2022-3717:01

Release date: 
Friday, August 19, 2022 - 10:03
Subject: 
go-toolset:rhel8 security and bug fix update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
* golang: syscall: faccessat checks wrong group (CVE-2022-29526)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update to Go 1.17.10

CVE-2022-24675
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
CVE-2022-28327
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
CVE-2022-29526
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Modularity name: go-toolset
Stream name: rhel8

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. delve-1.7.2-1.module+el8+1493+f5bc6c0d.src.rpm
    MD5: 29b9efbce0627677db6f25691b2f385f
    SHA-256: 72ee8811a145433d02d0968a2ecb2b40acc289b690cc49a85730fe0317f0c59c
    Size: 8.10 MB
  2. golang-1.17.10-1.module+el8+1493+f5bc6c0d.src.rpm
    MD5: 5cfbdcaf72af6f44f6d22555c40a8cf7
    SHA-256: e98192a7fa0ac263d8752d54ec9c531c43a2575ac7d00fbec9e2a1d6b51ed3d4
    Size: 21.01 MB
  3. go-toolset-1.17.10-1.module+el8+1493+f5bc6c0d.src.rpm
    MD5: bb782382cfeec18395f1b5f46612868c
    SHA-256: 961c582224a6bfd8259e64fccd4f561314e940fdf3cbec69bb61783a221cbdd2
    Size: 13.49 kB

Asianux Server 8 for x86_64
  1. delve-1.7.2-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: 78e5e58898252bd5ed005c0263504af3
    SHA-256: 7c577ea0c87f5aff281406616a09c6cd3b0ea1266cec25d387a9f0052f68bd07
    Size: 3.70 MB
  2. delve-debugsource-1.7.2-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: 345c37e9304f014a95fa754880ed2f45
    SHA-256: bbce42fc027ff9519813df77272f0e684cc208dcbbba7adafc9149cae0bb6f51
    Size: 827.49 kB
  3. golang-1.17.10-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: f48fcca82a9b3c06876a367a4546138c
    SHA-256: 0f7ca657720751614b0aea5c9c8e49ae478f5fd957feac355de280cb3843d3b7
    Size: 690.19 kB
  4. golang-bin-1.17.10-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: a48b3c4b54bd88e6361a727aebfdaff8
    SHA-256: be0e7e70e02b1e3899d6ec340ee55d55889888777733b8cb0fa66c52532ff0e8
    Size: 98.57 MB
  5. golang-docs-1.17.10-1.module+el8+1493+f5bc6c0d.noarch.rpm
    MD5: 2144eb4d832302a07f6f95f417a884fb
    SHA-256: 7a4761d2fdbb813a73e8c6ffb6a75a24b3980972c34cfb8908714ebb04cd468f
    Size: 112.06 kB
  6. golang-misc-1.17.10-1.module+el8+1493+f5bc6c0d.noarch.rpm
    MD5: 874427e0aa461faf38470f5b7b3991fc
    SHA-256: 412c5c497d3a6b2381e3e47c60e0215968b794dfe4023320f289fc45990cb7b4
    Size: 839.69 kB
  7. golang-race-1.17.10-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: 11574d1d14fd567d50c88afc1ab193fb
    SHA-256: d8ab7bf5d0e78f8c1d9f0d48153e210e421401653c59e777c28bb5a0c0c97d63
    Size: 19.24 MB
  8. golang-src-1.17.10-1.module+el8+1493+f5bc6c0d.noarch.rpm
    MD5: 78b25a66e527e2dadeb6dca90edcbcda
    SHA-256: 25148b3b0d403b52975799060946257f2f0fc84ba38ebdd3ee16e813bdc21525
    Size: 8.97 MB
  9. golang-tests-1.17.10-1.module+el8+1493+f5bc6c0d.noarch.rpm
    MD5: d08ab77c08f2fca24db514f8726c0d53
    SHA-256: 9f18bdb29cb0c37b85944230e89f8d3edd3fd0edfe9bd8791af56c449b63374d
    Size: 7.44 MB
  10. go-toolset-1.17.10-1.module+el8+1493+f5bc6c0d.x86_64.rpm
    MD5: 970fa2702f347d76b752190173589057
    SHA-256: 5529a2dbe98b939e1b2e679a88e3ce1aa529d66bb381b9edf35a1388ad6265c4
    Size: 11.81 kB