1. Home
  2. Security Advisories
  3. Red Hat
  4. RHSA-2022:5337

[RHSA-2022:5337] go-toolset:rhel8 security and bug fix update

Severity Moderate
Affected Packages 18
CVEs 4
Info Packages References Vulnerabilities

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

  • golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)

  • golang: syscall: faccessat checks wrong group (CVE-2022-29526)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Update to Go 1.17.10 (BZ#2091077)
Package Affected Version
pkg:rpm/redhat/golang?arch=x86_64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang?arch=s390x&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang?arch=ppc64le&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang?arch=aarch64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-tests?distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-src?distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-race?arch=x86_64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-misc?distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-docs?distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-bin?arch=x86_64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-bin?arch=s390x&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-bin?arch=ppc64le&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/golang-bin?arch=aarch64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/go-toolset?arch=x86_64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/go-toolset?arch=s390x&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/go-toolset?arch=ppc64le&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/go-toolset?arch=aarch64&distro=redhat-8.6 < 1.17.10-1.module+el8.6.0+15486+6d4da7db
pkg:rpm/redhat/delve?arch=x86_64&distro=redhat-8.6 < 1.7.2-1.module+el8.6.0+12972+ebab5911
ID
RHSA-2022:5337
Severity
moderate
URL
https://access.redhat.com/errata/RHSA-2022:5337
Published
2022-06-30T00:00:00
(2 years ago)
Modified
2022-06-30T00:00:00
(2 years ago)
Rights
Copyright 2022 Red Hat, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/golang?arch=x86_64&distro=redhat-8.6 redhat golang < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 x86_64
Affected pkg:rpm/redhat/golang?arch=s390x&distro=redhat-8.6 redhat golang < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 s390x
Affected pkg:rpm/redhat/golang?arch=ppc64le&distro=redhat-8.6 redhat golang < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 ppc64le
Affected pkg:rpm/redhat/golang?arch=aarch64&distro=redhat-8.6 redhat golang < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 aarch64
Affected pkg:rpm/redhat/golang-tests?distro=redhat-8.6 redhat golang-tests < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6
Affected pkg:rpm/redhat/golang-src?distro=redhat-8.6 redhat golang-src < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6
Affected pkg:rpm/redhat/golang-race?arch=x86_64&distro=redhat-8.6 redhat golang-race < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 x86_64
Affected pkg:rpm/redhat/golang-misc?distro=redhat-8.6 redhat golang-misc < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6
Affected pkg:rpm/redhat/golang-docs?distro=redhat-8.6 redhat golang-docs < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6
Affected pkg:rpm/redhat/golang-bin?arch=x86_64&distro=redhat-8.6 redhat golang-bin < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 x86_64
Affected pkg:rpm/redhat/golang-bin?arch=s390x&distro=redhat-8.6 redhat golang-bin < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 s390x
Affected pkg:rpm/redhat/golang-bin?arch=ppc64le&distro=redhat-8.6 redhat golang-bin < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 ppc64le
Affected pkg:rpm/redhat/golang-bin?arch=aarch64&distro=redhat-8.6 redhat golang-bin < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 aarch64
Affected pkg:rpm/redhat/go-toolset?arch=x86_64&distro=redhat-8.6 redhat go-toolset < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 x86_64
Affected pkg:rpm/redhat/go-toolset?arch=s390x&distro=redhat-8.6 redhat go-toolset < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 s390x
Affected pkg:rpm/redhat/go-toolset?arch=ppc64le&distro=redhat-8.6 redhat go-toolset < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 ppc64le
Affected pkg:rpm/redhat/go-toolset?arch=aarch64&distro=redhat-8.6 redhat go-toolset < 1.17.10-1.module+el8.6.0+15486+6d4da7db redhat-8.6 aarch64
Affected pkg:rpm/redhat/delve?arch=x86_64&distro=redhat-8.6 redhat delve < 1.7.2-1.module+el8.6.0+12972+ebab5911 redhat-8.6 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date