The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification. Upstream Issue: https://github.com/golang/go/issues/27842
Created golang-googlecode-net tracking bugs for this issue: Affects: epel-6 [bug 1639115] Affects: fedora-all [bug 1639114] Created heketi tracking bugs for this issue: Affects: epel-6 [bug 1639113] Affects: fedora-all [bug 1639112] Created kompose tracking bugs for this issue: Affects: fedora-all [bug 1639111] Created origin tracking bugs for this issue: Affects: fedora-all [bug 1639110]
Potential Upstream Fix: https://go-review.googlesource.com/c/net/+/137275 While the patch does look applicable, I am unable to reproduce this on RHEL. time ./poc real 0m0.007s user 0m0.002s sys 0m0.005s
OpenStack OpTools 8 and 9 grafana versions do not include net/html, which has the flawed code, setting these to NotAffected.
Kompose was in DevTools as part of devsuite. Devsuite is now retired (https://developers.redhat.com/products/devsuite/overview/)