The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.
Created golang-googlecode-net tracking bugs for this issue:
Affects: epel-6 [bug 1639115]
Affects: fedora-all [bug 1639114]
Created heketi tracking bugs for this issue:
Affects: epel-6 [bug 1639113]
Affects: fedora-all [bug 1639112]
Created kompose tracking bugs for this issue:
Affects: fedora-all [bug 1639111]
Created origin tracking bugs for this issue:
Affects: fedora-all [bug 1639110]
Potential Upstream Fix:
While the patch does look applicable, I am unable to reproduce this on RHEL.
OpenStack OpTools 8 and 9 grafana versions do not include net/html, which has the flawed code, setting these to NotAffected.
Kompose was in DevTools as part of devsuite. Devsuite is now retired (https://developers.redhat.com/products/devsuite/overview/)