Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Undefined
Fix Version/s: rhel-10.0.beta
Affects Version/s: rhel-10.0.beta
Component/s: golang
Labels:
None

Fixed in Build:
golang-1.22.4-1.el10
Severity:
Major
Keywords:

ZStream
sprint_count:
3

Pool Team:

sst_pt_llvm_rust_go
Sub-System Group:

ssg_platform_tools

Story Points:
3
ACKs Check:

QE ack, Dev ack
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Product Documentation Required:
None
Sprint:
Sprint 4, Sprint 5, Sprint 6
Release Blocker:
Approved Blocker
Target Backport Versions:

rhel-8.10.z, rhel-9.5

Preliminary Testing:
Pass
Errata Link:
https://errata.engineering.redhat.com/advisory/131063
Test Coverage:
None

Experience:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Planning:
None

Due to caching in the golang-fips/openssl@v2 backend, certain operations are no longer thread safe. We end up reusing EVP_CIPHER_CTX objects across EVP based operations, which can cause problems if these routines are called from multiple goroutines in parallel.

This issue was reported upstream by a Hashicorp Vault engineer: https://github.com/golang-fips/go/issues/187

links to

RHSA-2024:131063 golang bug fix and enhancement update

Assignee:: Derek Parker

Reporter:: Derek Parker

Developer:: David Benoit

QA Contact:: Edjunior Machado

Votes:: 0 Vote for this issue

Watchers:: 11 Start watching this issue

Created:: 2024/05/10 5:06 PM

Updated:: 2024/06/19 4:32 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates