go-toolset:rhel8 security update

2024-06-1413:59:30

Rockylinux Product Errata

errata.rockylinux.org

go programming language

security update

cve fixes

rocky linux 8

cvss score

vulnerabilities

golang

net/http

x/net/http2

crypto/x509

html/template

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

An update is available for module.golang, go-toolset, delve, module.go-toolset, module.delve, golang.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8aarch64delve< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky8x86_64delve< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky8aarch64delve-debuginfo< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-debuginfo-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky8x86_64delve-debuginfo< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-debuginfo-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky8aarch64delve-debugsource< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-debugsource-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky8x86_64delve-debugsource< 1.21.2-3.module+el8.10.0+1814+f68f8a63delve-debugsource-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky8aarch64golang< 1.21.9-1.module+el8.10.0+1814+f68f8a63golang-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky8x86_64golang< 1.21.9-1.module+el8.10.0+1814+f68f8a63golang-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky8aarch64golang-bin< 1.21.9-1.module+el8.10.0+1814+f68f8a63golang-bin-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky8x86_64golang-bin< 1.21.9-1.module+el8.10.0+1814+f68f8a63golang-bin-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	8	aarch64	delve	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky	8	x86_64	delve	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky	8	aarch64	delve-debuginfo	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-debuginfo-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky	8	x86_64	delve-debuginfo	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-debuginfo-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky	8	aarch64	delve-debugsource	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-debugsource-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky	8	x86_64	delve-debugsource	< 1.21.2-3.module+el8.10.0+1814+f68f8a63	delve-debugsource-0:1.21.2-3.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky	8	aarch64	golang	< 1.21.9-1.module+el8.10.0+1814+f68f8a63	golang-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky	8	x86_64	golang	< 1.21.9-1.module+el8.10.0+1814+f68f8a63	golang-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.x86_64.rpm
rocky	8	aarch64	golang-bin	< 1.21.9-1.module+el8.10.0+1814+f68f8a63	golang-bin-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.aarch64.rpm
rocky	8	x86_64	golang-bin	< 1.21.9-1.module+el8.10.0+1814+f68f8a63	golang-bin-0:1.21.9-1.module+el8.10.0+1814+f68f8a63.x86_64.rpm