What is RHSA-2024:1041?

RHSA-2024:1041 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: go-toolset-1.19-golang security update

Which CVE IDs does RHSA-2024:1041 cover?

RHSA-2024:1041 covers the following CVE IDs: CVE-2023-39326, CVE-2023-45285. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2024:1041?

RHSA-2024:1041 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2024:1041?

RHSA-2024:1041 affects 28 products, including: Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7); go-toolset-1.19-golang-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); go-toolset-1.19-golang-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); go-toolset-1.19-golang-0:1.19.13-5.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); and others — see the full list on the advisory page.

RHSA-2024:1041MediumCVSS 7.5

Red Hat Security Advisory: go-toolset-1.19-golang security update

Vendor

Red Hat Product Security

Published

February 29, 2024

Last Modified

August 2, 2026

🔗 CVE IDs covered (2)

CVE-2023-39326 →CVE-2023-45285 →

📋 Description

CVE-2023-39326 — golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests CVE-2023-45285 — golang: cmd/go: Protocol Fallback when fetching modules

🎯 Affected products28

Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-docs-0:1.19.13-5.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-docs-0:1.19.13-5.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-race-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-race-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-5.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-5.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-5.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available for this flaw. Workaround: This issue only affects users who are not using the module proxy and are fetching modules directly (i.e. GOPROXY=off). In order to mitigate this, keep GOPROXY with default values and use a module proxy. This vulnerability is not explored with default GOPROXY value.

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products28

✅ Remediation

🔗 References (5)