ALSA-2024:0887
ALSA-2024:0887 · Moderate: go-toolset:rhel8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: cmd/go: Protocol Fallback when fetching modules (CVE-2023-45285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
delve AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.2-1.module_el8.9.0+3642+43318da8
Update to 1.20.2-1.module_el8.9.0+3642+43318da8
go-toolset AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-1.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-1.module_el8.9.0+3728+f1d47c6f
golang AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
golang-bin AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
golang-docs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
golang-misc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
golang-src AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
golang-tests AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Update to 1.20.12-2.module_el8.9.0+3728+f1d47c6f
Original sources
- https://access.redhat.com/errata/RHSA-2024:0887
- https://access.redhat.com/security/cve/CVE-2023-39326
- https://access.redhat.com/security/cve/CVE-2023-45285
- https://bugzilla.redhat.com/2253323
- https://bugzilla.redhat.com/2253330
- https://errata.almalinux.org/8/ALSA-2024-0887.html
- https://osv.dev/vulnerability/ALSA-2024:0887