Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rockyRockylinux Product ErrataRLSA-2023:3923
HistoryJul 08, 2023 - 2:54 a.m.

go-toolset and golang security update

2023-07-0802:54:41
Rockylinux Product Errata
errata.rockylinux.org
13

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.7%

JSON

An update is available for go-toolset, golang.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)

  • golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)

  • golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405)

  • golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky9s390xgolang< 1.19.10-1.el9_2golang-0:1.19.10-1.el9_2.s390x.rpm
rocky9x86_64golang< 1.19.10-1.el9_2golang-0:1.19.10-1.el9_2.x86_64.rpm
rocky9s390xgolang-bin< 1.19.10-1.el9_2golang-bin-0:1.19.10-1.el9_2.s390x.rpm
rocky9x86_64golang-bin< 1.19.10-1.el9_2golang-bin-0:1.19.10-1.el9_2.x86_64.rpm
rocky9noarchgolang-docs< 1.19.10-1.el9_2golang-docs-0:1.19.10-1.el9_2.noarch.rpm
rocky9noarchgolang-misc< 1.19.10-1.el9_2golang-misc-0:1.19.10-1.el9_2.noarch.rpm
rocky9x86_64golang-race< 1.19.10-1.el9_2golang-race-0:1.19.10-1.el9_2.x86_64.rpm
rocky9noarchgolang-src< 1.19.10-1.el9_2golang-src-0:1.19.10-1.el9_2.noarch.rpm
rocky9noarchgolang-tests< 1.19.10-1.el9_2golang-tests-0:1.19.10-1.el9_2.noarch.rpm
rocky9s390xgo-toolset< 1.19.10-1.el9_2go-toolset-0:1.19.10-1.el9_2.s390x.rpm
Rows per page:
1-10 of 171

Related

nessus 31
oraclelinux 2
osv 15
openvas 7
redhat 3
almalinux 2
fedora 2
ibm 35
mageia 1
redos 1
freebsd 1
veracode 4
debiancve 4
cve 4
ubuntucve 4
amazon 4
alpinelinux 4
wolfi 4
redhatcve 4
prion 4
cbl_mariner 10
cgr 4
photon 5
f5 1
gentoo 1
ics 1
oracle 1
nessus
nessus
Fedora 37 : golang (2023-1819dc9854)
2023-08-11 00:00:00
Oracle Linux 8 : go-toolset:ol8 (ELSA-2023-3922)
2023-07-04 00:00:00
RHEL 8 : go-toolset:rhel8 (RHSA-2023:3922)
2023-06-29 00:00:00
oraclelinux
oraclelinux
go-toolset and golang security update
2023-07-07 00:00:00
go-toolset:ol8 security update
2023-07-04 00:00:00
osv
osv
Critical: go-toolset and golang security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-07-08 02:54:41
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
openvas
openvas
Fedora: Security Advisory for golang (FEDORA-2023-eb60fcd505)
2023-07-23 00:00:00
Fedora: Security Advisory for golang (FEDORA-2023-1819dc9854)
2023-08-12 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2859)
2023-09-20 00:00:00
redhat
redhat
(RHSA-2023:3923) Critical: go-toolset and golang security update
2023-06-29 09:38:01
(RHSA-2023:3920) Critical: go-toolset-1.19 and go-toolset-1.19-golang security update
2023-06-29 05:25:55
(RHSA-2023:3922) Critical: go-toolset:rhel8 security update
2023-06-29 08:54:12
almalinux
almalinux
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-06-29 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: golang-1.20.6-1.fc38
2023-07-21 02:27:24
[SECURITY] Fedora 37 Update: golang-1.19.12-1.fc37
2023-08-11 01:01:43
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities
2024-03-18 14:14:58
Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Golang Go
2023-07-25 06:12:54
Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST
2023-10-10 20:58:35
mageia
mageia
Updated golang packages fix security vulnerability
2023-07-07 08:54:45
redos
redos
ROS-20231109-01
2023-11-09 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
veracode
veracode
Code Injection
2023-07-10 00:12:02
Privilege Escalation
2023-07-10 00:03:06
Argument Injection
2023-07-10 00:01:18
debiancve
debiancve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
cve
cve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
ubuntucve
ubuntucve
CVE-2023-29402
2023-06-08 00:00:00
CVE-2023-29405
2023-06-08 00:00:00
CVE-2023-29403
2023-06-08 00:00:00
amazon
amazon
Important: golang
2023-07-17 17:39:00
Important: golang
2023-07-13 23:57:00
Important: golang
2023-07-20 17:29:00
alpinelinux
alpinelinux
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
wolfi
wolfi
CVE-2023-29403 vulnerabilities
2024-05-12 09:06:51
CVE-2023-29405 vulnerabilities
2024-05-12 09:06:51
CVE-2023-29402 vulnerabilities
2024-05-12 09:06:51
redhatcve
redhatcve
CVE-2023-29405
2023-06-26 18:17:40
CVE-2023-29402
2023-06-26 18:17:34
CVE-2023-29403
2023-06-26 17:47:00
prion
prion
Command injection
2023-06-08 21:15:00
Design/Logic Flaw
2023-06-08 21:15:00
Command injection
2023-06-08 21:15:00
cbl_mariner
cbl_mariner
CVE-2023-29402 affecting package golang for versions less than 1.20.7-1
2024-05-12 09:06:59
CVE-2023-29402 affecting package msft-golang for versions less than 1.19.10-1
2023-06-27 20:56:13
CVE-2023-29405 affecting package golang for versions less than 1.20.7-1
2024-05-12 09:06:51
cgr
cgr
CVE-2023-29405 vulnerabilities
2024-05-12 09:06:51
CVE-2023-29403 vulnerabilities
2024-05-12 09:06:51
CVE-2023-29402 vulnerabilities
2024-05-12 09:06:51
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0043
2023-07-04 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
f5
f5
K000138679 : GoLang vulnerabilities CVE-2023-24540, CVE-2023-29400, and CVE-2023-29403
2024-02-21 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.7%

JSON
Related for RLSA-2023:3923
nessus31oraclelinux2osv15openvas7redhat3almalinux2fedora2ibm35mageia1redos1freebsd1veracode4debiancve4cve4ubuntucve4amazon4alpinelinux4wolfi4redhatcve4prion4cbl_mariner10cgr4photon5f51gentoo1ics1oracle1