ALSA-2023:3083
ALSA-2023:3083 · Moderate: go-toolset:rhel8 security and bug fix update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412) * Update Go to 1.19.6 (BZ#2174430)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
delve AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.9.1-1.module_el8.8.0+3471+a62632a0
Update to 1.9.1-1.module_el8.8.0+3471+a62632a0
go-toolset AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-bin AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-docs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-misc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-race AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-src AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
golang-tests AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
Update to 1.19.6-1.module_el8.8.0+3558+75c9cb88
Original sources
- https://access.redhat.com/errata/RHSA-2023:3083
- https://access.redhat.com/security/cve/CVE-2022-41724
- https://access.redhat.com/security/cve/CVE-2022-41725
- https://bugzilla.redhat.com/2178488
- https://bugzilla.redhat.com/2178492
- https://errata.almalinux.org/8/ALSA-2023-3083.html
- https://osv.dev/vulnerability/ALSA-2023:3083