ALSA-2023:5721
ALSA-2023:5721 · Important: go-toolset:rhel8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: net/http, x/net/http2: rapid stream resets can cause excessive work [CVE-2023-44487] (CVE-2023-39325) * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
delve AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.9.1-1.module_el8.8.0+3471+a62632a0
Update to 1.9.1-1.module_el8.8.0+3471+a62632a0
go-toolset AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-bin AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-docs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-misc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-race AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-src AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
golang-tests AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.13-1.module_el8.8.0+3625+a06035cf
Update to 1.19.13-1.module_el8.8.0+3625+a06035cf
Original sources
- https://access.redhat.com/errata/RHSA-2023:5721
- https://access.redhat.com/security/cve/CVE-2023-39325
- https://access.redhat.com/security/cve/CVE-2023-44487
- https://bugzilla.redhat.com/2242803
- https://bugzilla.redhat.com/2243296
- https://errata.almalinux.org/8/ALSA-2023-5721.html
- https://osv.dev/vulnerability/ALSA-2023:5721