Fedora 28 : golang-googlecode-net (2019-07d447a1d3)

Bump to commit 16b79f2e4e95ea23b2bf9903c9809ff7b013ce85 Security fixes for CVE-2018-17143, CVE-2018-17142, CVE-2018-17075, CVE-2018-17846, CVE-2018-17847, CVE-2018-17848 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

CVE-2018-17143

The html package aka x/net/html through 2018-09-17 in Go mishandles , leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call...

CVE-2018-17143

The html package aka x/net/html through 2018-09-17 in Go mishandles , leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call...

CVE-2018-17143

Removed by vendor...

CVE-2018-17143

CVE-2018-17143 affects the Go html parser (x/net/html). The vulnerability arises from how the html package handles a crafted input fragment , which can cause a panic: runtime error in inBodyIM during an html.Parse call. The description and related advisories (GHSA/GITLAB entries) confirm the issu...