delve: Go Toolset provides the Go programming language tools and libraries
CVE-2020-28366 is fixed in 9 products on 1 platform, first by RHSA-2020:5493, released December 15, 2020. It is not reported as exploited. Patch Radar priority: High.
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS (CVE-2020-24553) * golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362) * golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366) * golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| delve · RHEL 8 | 0:1.4.1-1.module+el8.3.0+7840+63dfb1ed | RHSA-2020:5493 | Dec 15, 2020 |
| delve · ol 8 | 0:1.4.1-1.0.1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| go-toolset · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| go-toolset · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-bin · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-bin · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-docs · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-docs · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-misc · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-misc · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-race · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-race · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-src · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-src · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |
| golang-tests · RHEL 8 | 0:1.14.12-1.module+el8.3.0+8784+380394dc | RHSA-2020:5493 | Dec 15, 2020 |
| golang-tests · ol 8 | 0:1.14.12-1.module+el8.3.0+7887+1b2c3dab | ELSA-2020-5493 | Dec 22, 2020 |