(RHSA-2019:1519) Moderate: go-toolset:rhel8 security update

2019-06-1816:35:00

access.redhat.com

118

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.7%

JSON

The go-toolset:rhel8 module provides Go Toolset, a compiler toolset for building applications using the Go language and compiler suite.

Security Fix(es):

golang: CRLF injection in net/http (CVE-2019-9741)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64legolang-bin< 1.11.5-2.module+el8.0.0+3175+261ae921golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.ppc64le.rpm
RedHatanyx86_64golang-race< 1.11.5-2.module+el8.0.0+3175+261ae921golang-race-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHatanyx86_64golang-bin< 1.11.5-2.module+el8.0.0+3175+261ae921golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHatanyx86_64go-toolset< 1.11.5-2.module+el8.0.0+3175+261ae921go-toolset-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHatanys390xgolang-bin< 1.11.5-2.module+el8.0.0+3175+261ae921golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.s390x.rpm
RedHatanynoarchgolang-tests< 1.11.5-2.module+el8.0.0+3175+261ae921golang-tests-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm
RedHatanys390xgolang< 1.11.5-2.module+el8.0.0+3175+261ae921golang-1.11.5-2.module+el8.0.0+3175+261ae921.s390x.rpm
RedHatanynoarchgolang-src< 1.11.5-2.module+el8.0.0+3175+261ae921golang-src-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm
RedHatanyaarch64go-toolset< 1.11.5-2.module+el8.0.0+3175+261ae921go-toolset-1.11.5-2.module+el8.0.0+3175+261ae921.aarch64.rpm
RedHatanynoarchgolang-misc< 1.11.5-2.module+el8.0.0+3175+261ae921golang-misc-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	golang-bin	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.ppc64le.rpm
RedHat	any	x86_64	golang-race	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-race-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHat	any	x86_64	golang-bin	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHat	any	x86_64	go-toolset	< 1.11.5-2.module+el8.0.0+3175+261ae921	go-toolset-1.11.5-2.module+el8.0.0+3175+261ae921.x86_64.rpm
RedHat	any	s390x	golang-bin	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-bin-1.11.5-2.module+el8.0.0+3175+261ae921.s390x.rpm
RedHat	any	noarch	golang-tests	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-tests-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm
RedHat	any	s390x	golang	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-1.11.5-2.module+el8.0.0+3175+261ae921.s390x.rpm
RedHat	any	noarch	golang-src	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-src-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm
RedHat	any	aarch64	go-toolset	< 1.11.5-2.module+el8.0.0+3175+261ae921	go-toolset-1.11.5-2.module+el8.0.0+3175+261ae921.aarch64.rpm
RedHat	any	noarch	golang-misc	< 1.11.5-2.module+el8.0.0+3175+261ae921	golang-misc-1.11.5-2.module+el8.0.0+3175+261ae921.noarch.rpm