What is RHSA-2024:2892?

RHSA-2024:2892 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: go-toolset-1.19-golang security update

Which CVE IDs does RHSA-2024:2892 cover?

RHSA-2024:2892 covers the following CVE IDs: CVE-2023-45288. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2024:2892?

RHSA-2024:2892 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2024:2892?

RHSA-2024:2892 affects 28 products, including: Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7); go-toolset-1.19-golang-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); go-toolset-1.19-golang-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); go-toolset-1.19-golang-0:1.19.13-7.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7); and others — see the full list on the advisory page.

RHSA-2024:2892HighCVSS 7.5

Red Hat Security Advisory: go-toolset-1.19-golang security update

Vendor

Red Hat Product Security

Published

May 20, 2024

Last Modified

August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products28

Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.src as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-bin-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-docs-0:1.19.13-7.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-docs-0:1.19.13-7.el7_9.noarch as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-misc-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-race-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-race-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-src-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-7.el7_9.ppc64le as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-7.el7_9.s390x as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
go-toolset-1.19-golang-tests-0:1.19.13-7.el7_9.x86_64 as a component of Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products28

✅ Remediation

🔗 References (3)