Moderate: go-toolset:rhel8 security, bug fix, and enhancement update

2021-05-1805:59:11

errata.almalinux.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

JSON

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

The following packages have been upgraded to a later upstream version: golang (1.15.7), delve (1.5.0). (BZ#1870531)

Security Fix(es):

golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)
golang: cmd/go: packages using cgo can cause arbitrary code execution at build time (CVE-2021-3115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64delve< 1.5.0-2.module_el8.4.0+2086+3b0e6c24delve-1.5.0-2.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux8x86_64go-toolset< 1.15.7-1.module_el8.4.0+2086+3b0e6c24go-toolset-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux8x86_64golang< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux8x86_64golang-bin< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-bin-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux8noarchgolang-docs< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-docs-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux8noarchgolang-misc< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-misc-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux8x86_64golang-race< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-race-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux8noarchgolang-src< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-src-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux8noarchgolang-tests< 1.15.7-1.module_el8.4.0+2086+3b0e6c24golang-tests-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	delve	< 1.5.0-2.module_el8.4.0+2086+3b0e6c24	delve-1.5.0-2.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux	8	x86_64	go-toolset	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	go-toolset-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux	8	x86_64	golang	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux	8	x86_64	golang-bin	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-bin-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux	8	noarch	golang-docs	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-docs-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux	8	noarch	golang-misc	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-misc-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux	8	x86_64	golang-race	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-race-1.15.7-1.module_el8.4.0+2086+3b0e6c24.x86_64.rpm
almalinux	8	noarch	golang-src	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-src-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm
almalinux	8	noarch	golang-tests	< 1.15.7-1.module_el8.4.0+2086+3b0e6c24	golang-tests-1.15.7-1.module_el8.4.0+2086+3b0e6c24.noarch.rpm