Back to bug 2124668

Who When What Removed Added
TEJ RATHI 2022-09-06 18:16:15 UTC Blocks 2124673
Avinash Hanwate 2022-09-07 04:45:03 UTC CC amctagga, aoconnor, bniver, bodavis, dbenoit, emachado, flucifre, gmeno, jistone, jpadman, mbenjamin, mhackett, mnewsome, sipoyare, sostapov, tstellar, vereddy
Avinash Hanwate 2022-09-07 04:45:21 UTC CC abishop, agerstmayr, alakatos, ansmith, apevec, bbaude, bbuckingham, bcl, bcoca, bcourt, bkundu, btotty, chazlett, chousekn, cmeyers, cnv-qe-bugs, davidn, dcadzow, debarshir, desktop-qa-list, dkenigsb, dwalsh, eglynn, ehelms, etamir, fdeutsch, gblomqui, grafana-maint, hchiramm, jaharrin, jburrell, jcammara, jchui, jeder, jhardy, jjoyce, jkurik, jligon, jmulligan, jnovy, jobarker, joelsmith, jsherril, jwon, krathod, lball, lhh, lsm5, lzap, mabashia, madam, matzew, mboddu, mburns, mcressma, mgarciac, mheon, mhulan, mmagr, mmccune, mokumar, myarboro, nathans, nbecker, nmoumoul, nobody, notting, ocs-bugs, opohorel, orabin, oramraz, osapryki, osbuilders, oskutka, pcreech, pehunt, pjindal, pthomas, rchan, relrod, rhcos-sst, rhos-maint, rhs-bugs, rhuss, rpetrell, rrajasek, rsroka, saroy, sdoran, sgott, smcdonal, smullick, spower, sttts, tkral, tkuratom, tsweeney, umohnani, vkareh
Avinash Hanwate 2022-09-07 04:45:49 UTC CC amackenz, amasferr, bdettelb, dwhatley, dymurray, gparvin, ibolton, jcantril, jmatthew, jmontleo, jramanat, lmadsen, mkudlej, mrunge, mwringe, nboldt, njean, pahickey, periklis, ploffay, scorneli, slucidi, sseago, stcannon, tjochec, whayutin
Avinash Hanwate 2022-09-07 04:46:21 UTC CC jwendell, ovanders, rcernich
Jan Kurik 2022-09-07 05:28:55 UTC CC jkurik
Borja Tarraso 2022-09-10 09:39:27 UTC Depends On 2125778
TEJ RATHI 2022-09-12 06:50:58 UTC Fixed In Version golang 1.19.1, golang 1.18.6 golang 1.19.1
Avinash Hanwate 2022-09-14 08:24:26 UTC Depends On 2126658, 2126657
Avinash Hanwate 2022-09-14 08:29:43 UTC Depends On 2126670, 2126668, 2126666, 2126675, 2126674, 2126663, 2126669, 2126662, 2126667, 2126665, 2126660, 2126664, 2126672, 2126673, 2126671
Avinash Hanwate 2022-09-15 05:03:28 UTC CC vkumar
Tomáš Král 2022-09-16 07:47:25 UTC CC tkral
Vipul Nair 2022-09-19 12:33:13 UTC Depends On 2127941, 2127942
Avinash Hanwate 2022-09-22 07:05:45 UTC CC adudiak, tfister
Avinash Hanwate 2022-09-27 10:22:06 UTC Depends On 2130146, 2130147
Avinash Hanwate 2022-10-10 04:27:24 UTC Doc Text A flaw was found in the golang package. The JoinPath doesn't remove ../ path components appended to a domain that is not terminated by a slash. This is surprising and could conceivably lead to a directory traversal attack.
RaTasha Tillery-Smith 2022-10-10 13:29:30 UTC Doc Text A flaw was found in the golang package. The JoinPath doesn't remove ../ path components appended to a domain that is not terminated by a slash. This is surprising and could conceivably lead to a directory traversal attack. A flaw was found in the golang package. The JoinPath doesn't remove the ../ path components appended to a domain that is not terminated by a slash, possibly leading to a directory traversal attack.
Red Hat Bugzilla 2022-10-28 13:12:45 UTC CC krathod
errata-xmlrpc 2022-11-28 02:52:00 UTC Link ID Red Hat Product Errata RHSA-2022:8634
Product Security DevOps Team 2022-12-08 18:33:14 UTC Resolution --- ERRATA
Status NEW CLOSED
Last Closed 2022-12-08 18:33:14 UTC
errata-xmlrpc 2023-01-17 19:37:21 UTC Link ID Red Hat Product Errata RHSA-2022:7399
errata-xmlrpc 2023-01-19 11:04:28 UTC Link ID Red Hat Product Errata RHSA-2023:0264
Victor Kareh 2023-01-19 19:16:40 UTC CC vkareh
Josh Stone 2023-02-04 01:30:10 UTC CC jistone
errata-xmlrpc 2023-02-09 02:17:49 UTC Link ID Red Hat Product Errata RHSA-2023:0693
Yadnyawalk Tale 2023-02-09 07:49:59 UTC CC ytale
errata-xmlrpc 2023-05-18 00:36:30 UTC Link ID Red Hat Product Errata RHSA-2023:3204
errata-xmlrpc 2023-05-18 02:55:17 UTC Link ID Red Hat Product Errata RHSA-2023:3205
errata-xmlrpc 2023-05-18 14:27:46 UTC Link ID Red Hat Product Errata RHSA-2023:0584
errata-xmlrpc 2023-06-15 16:00:56 UTC Link ID Red Hat Product Errata RHSA-2023:3642
Joel Smith 2023-06-21 15:51:23 UTC CC joelsmith
errata-xmlrpc 2023-06-22 19:51:50 UTC Link ID Red Hat Product Errata RHSA-2023:3742
errata-xmlrpc 2023-06-26 01:15:57 UTC Link ID Red Hat Product Errata RHSA-2023:3613

Back to bug 2124668