(RHSA-2020:3665) Moderate: go-toolset:rhel8 security update

2020-09-0808:39:09

access.redhat.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.054 Low

EPSS

Percentile

93.1%

JSON

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)
golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (CVE-2020-16845)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64delve< 1.3.2-3.module+el8.2.0+5581+896cb53edelve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHatanys390xgolang< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-1.13.15-1.module+el8.2.0+7662+fa98b974.s390x.rpm
RedHatanyx86_64delve-debugsource< 1.3.2-3.module+el8.2.0+5581+896cb53edelve-debugsource-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHatanys390xgolang-bin< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-bin-1.13.15-1.module+el8.2.0+7662+fa98b974.s390x.rpm
RedHatanynoarchgolang-docs< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-docs-1.13.15-1.module+el8.2.0+7662+fa98b974.noarch.rpm
RedHatanyaarch64golang< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-1.13.15-1.module+el8.2.0+7662+fa98b974.aarch64.rpm
RedHatanyx86_64delve-debuginfo< 1.3.2-3.module+el8.2.0+5581+896cb53edelve-debuginfo-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHatanyaarch64go-toolset< 1.13.15-1.module+el8.2.0+7662+fa98b974go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.aarch64.rpm
RedHatanynoarchgolang-src< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-src-1.13.15-1.module+el8.2.0+7662+fa98b974.noarch.rpm
RedHatanyppc64legolang< 1.13.15-1.module+el8.2.0+7662+fa98b974golang-1.13.15-1.module+el8.2.0+7662+fa98b974.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	delve	< 1.3.2-3.module+el8.2.0+5581+896cb53e	delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHat	any	s390x	golang	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-1.13.15-1.module+el8.2.0+7662+fa98b974.s390x.rpm
RedHat	any	x86_64	delve-debugsource	< 1.3.2-3.module+el8.2.0+5581+896cb53e	delve-debugsource-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHat	any	s390x	golang-bin	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-bin-1.13.15-1.module+el8.2.0+7662+fa98b974.s390x.rpm
RedHat	any	noarch	golang-docs	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-docs-1.13.15-1.module+el8.2.0+7662+fa98b974.noarch.rpm
RedHat	any	aarch64	golang	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-1.13.15-1.module+el8.2.0+7662+fa98b974.aarch64.rpm
RedHat	any	x86_64	delve-debuginfo	< 1.3.2-3.module+el8.2.0+5581+896cb53e	delve-debuginfo-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm
RedHat	any	aarch64	go-toolset	< 1.13.15-1.module+el8.2.0+7662+fa98b974	go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.aarch64.rpm
RedHat	any	noarch	golang-src	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-src-1.13.15-1.module+el8.2.0+7662+fa98b974.noarch.rpm
RedHat	any	ppc64le	golang	< 1.13.15-1.module+el8.2.0+7662+fa98b974	golang-1.13.15-1.module+el8.2.0+7662+fa98b974.ppc64le.rpm