Headline

RHSA-2021:5160: Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2021-44716: golang: net/http: limit growth of header canonicalization cache
CVE-2021-44717: golang: syscall: don’t close fd 0 on ForkExec error

4 years ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes

Skip to navigation Skip to main content

Utilities

Subscriptions
Downloads
Containers
Support Cases

Red Hat Customer Portal

Infrastructure and Management

Red Hat Enterprise Linux
Red Hat Virtualization
Red Hat Identity Management
Red Hat Directory Server
Red Hat Certificate System
Red Hat Satellite
Red Hat Subscription Management
Red Hat Update Infrastructure
Red Hat Insights
Red Hat Ansible Automation Platform

Cloud Computing

Red Hat OpenShift
Red Hat CloudForms
Red Hat OpenStack Platform
Red Hat OpenShift Container Platform
Red Hat OpenShift Data Science
Red Hat OpenShift Online
Red Hat OpenShift Dedicated
Red Hat Advanced Cluster Security for Kubernetes
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Quay
Red Hat CodeReady Workspaces
Red Hat OpenShift Service on AWS

Storage

Red Hat Gluster Storage
Red Hat Hyperconverged Infrastructure
Red Hat Ceph Storage
Red Hat OpenShift Data Foundation

Runtimes

Red Hat Runtimes
Red Hat JBoss Enterprise Application Platform
Red Hat Data Grid
Red Hat JBoss Web Server
Red Hat Single Sign On
Red Hat support for Spring Boot
Red Hat build of Node.js
Red Hat build of Thorntail
Red Hat build of Eclipse Vert.x
Red Hat build of OpenJDK
Red Hat build of Quarkus
Red Hat CodeReady Studio

Integration and Automation

Red Hat Process Automation
Red Hat Process Automation Manager
Red Hat Decision Manager

All Products

Issued:

2021-12-15

Updated:

2021-12-15

RHSA-2021:5160 - Security Advisory

Overview
Updated Packages

Synopsis

Important: go-toolset:rhel8 security and bug fix update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)
golang: syscall: don’t close fd 0 on ForkExec error (CVE-2021-44717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Rebase Go to 1.16.12 (BZ#2031125)

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

BZ - 2030801 - CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
BZ - 2030806 - CVE-2021-44717 golang: syscall: don’t close fd 0 on ForkExec error

Red Hat Enterprise Linux for x86_64 8

SRPM

delve-1.6.0-1.module+el8.5.0+10379+d6b83bd0.src.rpm

SHA-256: 2fe7dc046b40e88e3885baebb5a2f98284a5e5246ee0d78ae2a6dc68eb0deba9

go-toolset-1.16.12-1.module+el8.5.0+13637+960c7771.src.rpm

SHA-256: 5da842bc52eaa90abb1a651f81f6141ee7d6e59f793562badd731cc9a296b967

golang-1.16.12-1.module+el8.5.0+13637+960c7771.src.rpm

SHA-256: bac6fa6cc44d9e0ee781eca0bf0e082152a58c883892af188c9233d7f72475e2

x86_64

delve-1.6.0-1.module+el8.5.0+10379+d6b83bd0.x86_64.rpm

SHA-256: 19ddcf261f5052cd833567e27a33033a6bb0894fbbcf60eab61ed033f613177e

delve-debuginfo-1.6.0-1.module+el8.5.0+10379+d6b83bd0.x86_64.rpm

SHA-256: 1dd9c71c68294b9fa9e4e1e5acc31dd06017511293dc9dd3e22b05acd2692b53

delve-debugsource-1.6.0-1.module+el8.5.0+10379+d6b83bd0.x86_64.rpm

SHA-256: 70e97ea9759ee45de11781b5ab85813276810717902cc7c3684b00c57c30f6f9

go-toolset-1.16.12-1.module+el8.5.0+13637+960c7771.x86_64.rpm

SHA-256: c5fa0af3541569e458b038d0bc169cac9de4aec6ae97523faf3f0e3e85c47f2e

golang-1.16.12-1.module+el8.5.0+13637+960c7771.x86_64.rpm

SHA-256: 329215b0d4bbf7f87a4c6deeaad40b07794256b4eb5fa8dfcb5dfc96b66e8c43

golang-bin-1.16.12-1.module+el8.5.0+13637+960c7771.x86_64.rpm

SHA-256: 4bed71791525b5de3d3a24ca2495b31dc04822a5ab0e3ae0911a43c4b18b6742

golang-docs-1.16.12-1.module+el8.5.0+13637+960c7771.noarch.rpm

SHA-256: 07a148fb6202df86456d1b1e645bf7b4f49f3d421dbb6b990be3440f98a2ecf7

golang-misc-1.16.12-1.module+el8.5.0+13637+960c7771.noarch.rpm

SHA-256: 33b0bcb4a34c59c8c2a20d8c15e0412917433ff6f4e7eb659f357ba74bd7adc6

golang-race-1.16.12-1.module+el8.5.0+13637+960c7771.x86_64.rpm

SHA-256: e303c47ccee4684bbb3a6a15dfa0b3ddbd6402924bacd24257a37718367aa302

golang-src-1.16.12-1.module+el8.5.0+13637+960c7771.noarch.rpm

SHA-256: b28e7bc0f8b8c13cbdc27a8f0767b271c887957616a77e9aa8d2460a8d5e97bc

golang-tests-1.16.12-1.module+el8.5.0+13637+960c7771.noarch.rpm

SHA-256: 8507c2dd15e5e1068b3d4f84e2c231292689fefd2d2092adc36f77ece038a037

Red Hat Enterprise Linux for IBM z Systems 8

SRPM

go-toolset-1.16.12-1.module+el8.5.0+13637+960c7771.src.rpm

SHA-256: 5da842bc52eaa90abb1a651f81f6141ee7d6e59f793562badd731cc9a296b967

golang-1.16.12-1.module+el8.5.0+13637+960c7771.src.rpm

SHA-256: bac6fa6cc44d9e0ee781eca0bf0e082152a58c883892af188c9233d7f72475e2

s390x