Fedora Linux 8777 Published by

A golang-x-exp security update has been released for Fedora 36.



SECURITY: Fedora 36 Update: golang-x-exp-0-0.42.20220330git053ad81.fc36


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-08ae2dd481
2022-05-07 04:08:14.315797
--------------------------------------------------------------------------------

Name : golang-x-exp
Product : Fedora 36
Version : 0
Release : 0.42.20220330git053ad81.fc36
URL :   https://github.com/golang/exp
Summary : Experimental and deprecated Go packages
Description :

This subrepository holds experimental and deprecated packages.

The idea for this subrepository originated as the pkg/exp directory of the main
repository, but its presence there made it unavailable to users of the binary
downloads of the Go installation. The subrepository has therefore been created
to make it possible to go get these packages.

--------------------------------------------------------------------------------
Update Information:

Rebuild for CVE-2022-27191 ---- Fix FTBFS Close: rhbz#2045471
--------------------------------------------------------------------------------
ChangeLog:

* Sat Apr 16 2022 Fabio Alessandro Locati 0-0.42
- Rebuilt for CVE-2022-27191
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2045471 - golang-github-appc-goaci: FTBFS in Fedora rawhide/f36
  https://bugzilla.redhat.com/show_bug.cgi?id=2045471
[ 2 ] Bug #2074262 - CVE-2022-27191 golang-x-crypto: golang: crash in a golang.org/x/crypto/ssh server [fedora-all]
  https://bugzilla.redhat.com/show_bug.cgi?id=2074262
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-08ae2dd481' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________