ALSA-2025:22668
ALSA-2025:22668 · Moderate: go-toolset:rhel8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906) * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
delve AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.2-1.module_el8.10.0+4074+24330916
Update to 1.25.2-1.module_el8.10.0+4074+24330916
go-toolset AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-bin AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-docs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-misc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-race AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-src AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
golang-tests AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.25.3-2.module_el8.10.0+4074+24330916
Update to 1.25.3-2.module_el8.10.0+4074+24330916
Original sources
- https://access.redhat.com/errata/RHSA-2025:22668
- https://access.redhat.com/security/cve/CVE-2025-47906
- https://access.redhat.com/security/cve/CVE-2025-58183
- https://bugzilla.redhat.com/2396546
- https://bugzilla.redhat.com/2407258
- https://errata.almalinux.org/8/ALSA-2025-22668.html
- https://osv.dev/vulnerability/ALSA-2025:22668