RHSA-2019:2726HighCVSS 7.5

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Published
September 12, 2019
Last Modified
August 15, 2026

🔗 CVE IDs covered (2)

CVE-2019-9512 →CVE-2019-9514 →

📋 Description

CVE-2019-9512 — HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9514 — HTTP/2: flood using HEADERS frames results in unbounded memory growth

🎯 Affected products20

  • Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.11.13-1.module+el8.0.1+4087+d8180914.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.11.13-1.module+el8.0.1+4087+d8180914.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.11.13-1.module+el8.0.1+4087+d8180914.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.11.13-1.module+el8.0.1+4087+d8180914.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.11.13-1.module+el8.0.1+4087+d8180914.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.11.13-2.module+el8.0.1+4087+d8180914.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.11.13-2.module+el8.0.1+4087+d8180914.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.11.13-2.module+el8.0.1+4087+d8180914.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.11.13-2.module+el8.0.1+4087+d8180914.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.11.13-2.module+el8.0.1+4087+d8180914.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.11.13-2.module+el8.0.1+4087+d8180914.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.11.13-2.module+el8.0.1+4087+d8180914.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.11.13-2.module+el8.0.1+4087+d8180914.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.11.13-2.module+el8.0.1+4087+d8180914.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-docs-0:1.11.13-2.module+el8.0.1+4087+d8180914.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-misc-0:1.11.13-2.module+el8.0.1+4087+d8180914.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-race-0:1.11.13-2.module+el8.0.1+4087+d8180914.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-src-0:1.11.13-2.module+el8.0.1+4087+d8180914.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-tests-0:1.11.13-2.module+el8.0.1+4087+d8180914.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (6)