RHSA-2022:1819MediumCVSS 9.8

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Published
May 10, 2022
Last Modified
July 18, 2026

🔗 CVE IDs covered (7)

CVE-2021-41772 →CVE-2022-23772 →CVE-2022-23773 →CVE-2022-23806 →CVE-2021-38297 →CVE-2021-39293 →CVE-2021-41771 →

📋 Description

CVE-2021-38297 — golang: Command-line arguments may overwrite global data CVE-2021-39293 — golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) CVE-2021-41771 — golang: debug/macho: invalid dynamic symbol table command can cause panic CVE-2021-41772 — golang: archive/zip: Reader.Open panics on empty string CVE-2022-23772 — golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString CVE-2022-23773 — golang: cmd/go: misinterpretation of branch names can lead to incorrect access control CVE-2022-23806 — golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

🔗 References (12)