go-toolset:ol8 security update

2024-09-2300:00:00

linux.oracle.com

go-toolset update

golang update

cve fixes

rhel-59518

rhel-58223

rhel-57961

rhel-57847

rhel-57860

cve-2024-24791

fix

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.9

Confidence

Low

JSON

delve
[1.21.2-4.0.1]

Disable DWARF compression which has issues (Alex Burmashev)
[1.21.2-4]
Skip tests in %check due to incompatible Go version in buildroot (temporary).
Resolves: RHEL-59518
golang
[1.21.13-2]
Rebuild Go with CVE Fixes
Remove fix-memleak-setupRSA.patch (exists upstream)
Resolves: RHEL-58223
Resolves: RHEL-57961
Resolves: RHEL-57847
Resolves: RHEL-57860
[1.21.13-1]
Update to Go1.21.13 to fix CVE-2024-24791
Resolves: RHEL-47198
go-toolset
[1.21.13-1]
Fix CVE-2024-24791
Resolves: RHEL-47198

OSVersionArchitecturePackageVersionFilename
oracle linux8srcdelve< 1.21.2-4.0.1.moduledelve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.src.rpm
oracle linux8srcgo-toolset< 1.21.13-1.modulego-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.src.rpm
oracle linux8srcgolang< 1.21.13-2.modulegolang-1.21.13-2.module+el8.10.0+90407+20770c94.src.rpm
oracle linux8aarch64delve< 1.21.2-4.0.1.moduledelve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux8aarch64go-toolset< 1.21.13-1.modulego-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux8aarch64golang< 1.21.13-2.modulegolang-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux8aarch64golang-bin< 1.21.13-2.modulegolang-bin-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux8noarchgolang-docs< 1.21.13-2.modulegolang-docs-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm
oracle linux8noarchgolang-misc< 1.21.13-2.modulegolang-misc-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm
oracle linux8noarchgolang-src< 1.21.13-2.modulegolang-src-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	delve	< 1.21.2-4.0.1.module	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.src.rpm
oracle linux	8	src	go-toolset	< 1.21.13-1.module	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.src.rpm
oracle linux	8	src	golang	< 1.21.13-2.module	golang-1.21.13-2.module+el8.10.0+90407+20770c94.src.rpm
oracle linux	8	aarch64	delve	< 1.21.2-4.0.1.module	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux	8	aarch64	go-toolset	< 1.21.13-1.module	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux	8	aarch64	golang	< 1.21.13-2.module	golang-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux	8	aarch64	golang-bin	< 1.21.13-2.module	golang-bin-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm
oracle linux	8	noarch	golang-docs	< 1.21.13-2.module	golang-docs-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm
oracle linux	8	noarch	golang-misc	< 1.21.13-2.module	golang-misc-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm
oracle linux	8	noarch	golang-src	< 1.21.13-2.module	golang-src-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm