What is RHSA-2021:5176?

RHSA-2021:5176 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update

Which CVE IDs does RHSA-2021:5176 cover?

RHSA-2021:5176 covers the following CVE IDs: CVE-2021-41772, CVE-2021-44716, CVE-2021-44717. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:5176?

RHSA-2021:5176 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2021:5176HighCVSS 7.5

Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update

Vendor

Red Hat Product Security

Published

December 16, 2021

Last Modified

June 25, 2026

🔗 CVE IDs covered (3)

CVE-2021-41772 →CVE-2021-44716 →CVE-2021-44717 →

📋 Description

CVE-2021-41772 — golang: archive/zip: Reader.Open panics on empty string CVE-2021-44716 — golang: net/http: limit growth of header canonicalization cache CVE-2021-44717 — golang: syscall: don't close fd 0 on ForkExec error

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2021:5176
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.16.6_toolset
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2030801
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2030806
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5176.json