RHSA-2022:1819MediumCVSS 9.8

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Published
May 10, 2022
Last Modified
October 15, 2026

🔗 CVE IDs covered (7)

CVE-2022-23772 →CVE-2022-23773 →CVE-2022-23806 →CVE-2021-38297 →CVE-2021-39293 →CVE-2021-41771 →CVE-2021-41772 →

📋 Description

CVE-2021-38297 — golang: Command-line arguments may overwrite global data CVE-2021-39293 — golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) CVE-2021-41771 — golang: debug/macho: invalid dynamic symbol table command can cause panic CVE-2021-41772 — golang: archive/zip: Reader.Open panics on empty string CVE-2022-23772 — golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString CVE-2022-23773 — golang: cmd/go: misinterpretation of branch names can lead to incorrect access control CVE-2022-23806 — golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

🎯 Affected products24

  • Red Hat Enterprise Linux AppStream (v. 8)
  • delve-0:1.7.2-1.module+el8.6.0+12972+ebab5911.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • delve-0:1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • delve-debuginfo-0:1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • delve-debugsource-0:1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.17.7-1.module+el8.6.0+14297+32a15e19.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.17.7-1.module+el8.6.0+14297+32a15e19.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.17.7-1.module+el8.6.0+14297+32a15e19.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.17.7-1.module+el8.6.0+14297+32a15e19.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • go-toolset-0:1.17.7-1.module+el8.6.0+14297+32a15e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.17.7-1.module+el8.6.0+14297+32a15e19.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.17.7-1.module+el8.6.0+14297+32a15e19.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.17.7-1.module+el8.6.0+14297+32a15e19.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.17.7-1.module+el8.6.0+14297+32a15e19.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-0:1.17.7-1.module+el8.6.0+14297+32a15e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.17.7-1.module+el8.6.0+14297+32a15e19.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.17.7-1.module+el8.6.0+14297+32a15e19.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.17.7-1.module+el8.6.0+14297+32a15e19.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-bin-0:1.17.7-1.module+el8.6.0+14297+32a15e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-docs-0:1.17.7-1.module+el8.6.0+14297+32a15e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-misc-0:1.17.7-1.module+el8.6.0+14297+32a15e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-race-0:1.17.7-1.module+el8.6.0+14297+32a15e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-src-0:1.17.7-1.module+el8.6.0+14297+32a15e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • golang-tests-0:1.17.7-1.module+el8.6.0+14297+32a15e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (12)