golang security update

2024-09-2300:00:00

linux.oracle.com

version 1.21.13-3

cve fixes

rhel-58226

rhel-57962

rhel-57848

rhel-57865

rebase to go1.21.13

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.8

Confidence

Low

JSON

[1.21.13-3]

Related: RHEL-58226
[1.21.13-2]
Rebuild Go with CVE Fixes
Remove fix-memleak-setupRSA.patch (exists upstream)
Resolves: RHEL-58226
Resolves: RHEL-57962
Resolves: RHEL-57848
Resolves: RHEL-57865
[1.21.13-1]
Rebase to Go1.21.13 to pick the fix for CVE-2024-24791
Technically Go1.21.12 contains the fix for the CVE but there was another
latest release so rebasing to that
Resolves: RHEL-53547

OSVersionArchitecturePackageVersionFilename
oracle linux9srcgolang< 1.21.13-3.el9_4golang-1.21.13-3.el9_4.src.rpm
oracle linux9aarch64go-toolset< 1.21.13-3.el9_4go-toolset-1.21.13-3.el9_4.aarch64.rpm
oracle linux9aarch64golang< 1.21.13-3.el9_4golang-1.21.13-3.el9_4.aarch64.rpm
oracle linux9aarch64golang-bin< 1.21.13-3.el9_4golang-bin-1.21.13-3.el9_4.aarch64.rpm
oracle linux9noarchgolang-docs< 1.21.13-3.el9_4golang-docs-1.21.13-3.el9_4.noarch.rpm
oracle linux9noarchgolang-misc< 1.21.13-3.el9_4golang-misc-1.21.13-3.el9_4.noarch.rpm
oracle linux9noarchgolang-src< 1.21.13-3.el9_4golang-src-1.21.13-3.el9_4.noarch.rpm
oracle linux9noarchgolang-tests< 1.21.13-3.el9_4golang-tests-1.21.13-3.el9_4.noarch.rpm
oracle linux9srcgolang< 1.21.13-3.el9_4golang-1.21.13-3.el9_4.src.rpm
oracle linux9x86_64go-toolset< 1.21.13-3.el9_4go-toolset-1.21.13-3.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	golang	< 1.21.13-3.el9_4	golang-1.21.13-3.el9_4.src.rpm
oracle linux	9	aarch64	go-toolset	< 1.21.13-3.el9_4	go-toolset-1.21.13-3.el9_4.aarch64.rpm
oracle linux	9	aarch64	golang	< 1.21.13-3.el9_4	golang-1.21.13-3.el9_4.aarch64.rpm
oracle linux	9	aarch64	golang-bin	< 1.21.13-3.el9_4	golang-bin-1.21.13-3.el9_4.aarch64.rpm
oracle linux	9	noarch	golang-docs	< 1.21.13-3.el9_4	golang-docs-1.21.13-3.el9_4.noarch.rpm
oracle linux	9	noarch	golang-misc	< 1.21.13-3.el9_4	golang-misc-1.21.13-3.el9_4.noarch.rpm
oracle linux	9	noarch	golang-src	< 1.21.13-3.el9_4	golang-src-1.21.13-3.el9_4.noarch.rpm
oracle linux	9	noarch	golang-tests	< 1.21.13-3.el9_4	golang-tests-1.21.13-3.el9_4.noarch.rpm
oracle linux	9	src	golang	< 1.21.13-3.el9_4	golang-1.21.13-3.el9_4.src.rpm
oracle linux	9	x86_64	go-toolset	< 1.21.13-3.el9_4	go-toolset-1.21.13-3.el9_4.x86_64.rpm