Moderate: go-toolset:rhel8 security and bug fix update

🗓️ 10 May 2022 06:29:31Reported by AlmaLinuxType

almalinux

almalinux🔗 errata.almalinux.org👁 78 Views

Update for Go Toolset on RHEL8 with security and bug fixe

Reporter	Title	Published	Views	Family All 704
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-41772,CVE-2021-41771)	22 Apr 202220:29	–	ibm
IBM Security Bulletins	Security Bulletin: Potential module resolution error in DataPower Operator	17 Jun 202221:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multipe vulnerabilities	4 Feb 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2022-23772	4 Nov 202216:51	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-33196)	22 Apr 202215:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to a variety of issues due to 3rd party software	27 Sep 202417:52	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to multiple Go vulnerabilities	14 Oct 202113:05	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2022-23772	5 May 202214:42	–	ibm
IBM Security Bulletins	Security Bulletin: DataPower Operator vulnerable to a Denial of Service (CVE-2022-23806)	20 Jun 202216:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2021-39293	26 May 202214:15	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	noarch	golang-docs	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-docs-1.17.7-1.module_el8.6.0+2736+ec10aba8.noarch.rpm
almalinux	8	x86_64	golang-race	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-race-1.17.7-1.module_el8.6.0+2736+ec10aba8.x86_64.rpm
almalinux	8	noarch	golang-misc	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-misc-1.17.7-1.module_el8.6.0+2736+ec10aba8.noarch.rpm
almalinux	8	x86_64	delve	1.7.2-1.module_el8.6.0+2736+ec10aba8	delve-1.7.2-1.module_el8.6.0+2736+ec10aba8.x86_64.rpm
almalinux	8	noarch	golang-src	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-src-1.17.7-1.module_el8.6.0+2736+ec10aba8.noarch.rpm
almalinux	8	x86_64	go-toolset	1.17.7-1.module_el8.6.0+2736+ec10aba8	go-toolset-1.17.7-1.module_el8.6.0+2736+ec10aba8.x86_64.rpm
almalinux	8	x86_64	golang	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-1.17.7-1.module_el8.6.0+2736+ec10aba8.x86_64.rpm
almalinux	8	x86_64	golang-bin	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-bin-1.17.7-1.module_el8.6.0+2736+ec10aba8.x86_64.rpm
almalinux	8	noarch	golang-tests	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-tests-1.17.7-1.module_el8.6.0+2736+ec10aba8.noarch.rpm
almalinux	8	aarch64	golang-bin	1.17.7-1.module_el8.6.0+2736+ec10aba8	golang-bin-1.17.7-1.module_el8.6.0+2736+ec10aba8.aarch64.rpm

Source	Link
errata	www.errata.almalinux.org/8/ALSA-2022-1819.html
vulners	www.vulners.com/cve/CVE-2021-38297
vulners	www.vulners.com/cve/CVE-2021-39293
vulners	www.vulners.com/cve/CVE-2021-41771
vulners	www.vulners.com/cve/CVE-2021-41772
vulners	www.vulners.com/cve/CVE-2022-23772
vulners	www.vulners.com/cve/CVE-2022-23773
vulners	www.vulners.com/cve/CVE-2022-23806

10 May 2022 08:02Current

9.3High risk

Vulners AI Score9.3

CVSS 27.8

CVSS 3.19.8

EPSS0.10299

go toolset rhel8 security fixes bug fixes cve-2021-38297 cve-2021-33196 cve-2021-39293 cve-2021-41771 cve-2021-41772 cve-2022-23772 cve-2022-23773 cve-2022-23806 almalinux unix