Red Hat Security AdvisoryRHSA-2021:2634
go-toolset-1.15 and go-toolset-1.15-golang security and bug fix update
Released 2021-07-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.15-1.15.13-1.el7_9, go-toolset-1.15-build-1.15.13-1.el7_9, go-toolset-1.15-golang-1.15.13-1.el7_9 +8
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.15-1.15.13-1.el7_9, go-toolset-1.15-build-1.15.13-1.el7_9, go-toolset-1.15-golang-1.15.13-1.el7_9 +8
Fixes 1 record
Priority LOW 39
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03464 · Published 2021-08-02 · Partial fix CWE-20
