Moderate: go-toolset security update

2024-07-0200:00:00

errata.almalinux.org

go toolset

golang

security update

zip files

netip

cve-2024-24789

cve-2024-24790

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

JSON

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchgolang-src< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-src-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux8noarchgolang-tests< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-tests-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux8noarchgolang-docs< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-docs-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux8noarchgolang-misc< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-misc-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux8aarch64golang< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux8aarch64go-toolset< 1.21.11-1.module_el8.10.0+3863+bb82df69go-toolset-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux8aarch64delve< 1.21.2-3.module_el8.10.0+3760+4dd778f9delve-1.21.2-3.module_el8.10.0+3760+4dd778f9.aarch64.rpm
almalinux8aarch64golang-bin< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-bin-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux8x86_64golang< 1.21.11-1.module_el8.10.0+3863+bb82df69golang-1.21.11-1.module_el8.10.0+3863+bb82df69.x86_64.rpm
almalinux8x86_64delve< 1.21.2-3.module_el8.10.0+3760+4dd778f9delve-1.21.2-3.module_el8.10.0+3760+4dd778f9.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	golang-src	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-src-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux	8	noarch	golang-tests	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-tests-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux	8	noarch	golang-docs	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-docs-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux	8	noarch	golang-misc	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-misc-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm
almalinux	8	aarch64	golang	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux	8	aarch64	go-toolset	< 1.21.11-1.module_el8.10.0+3863+bb82df69	go-toolset-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux	8	aarch64	delve	< 1.21.2-3.module_el8.10.0+3760+4dd778f9	delve-1.21.2-3.module_el8.10.0+3760+4dd778f9.aarch64.rpm
almalinux	8	aarch64	golang-bin	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-bin-1.21.11-1.module_el8.10.0+3863+bb82df69.aarch64.rpm
almalinux	8	x86_64	golang	< 1.21.11-1.module_el8.10.0+3863+bb82df69	golang-1.21.11-1.module_el8.10.0+3863+bb82df69.x86_64.rpm
almalinux	8	x86_64	delve	< 1.21.2-3.module_el8.10.0+3760+4dd778f9	delve-1.21.2-3.module_el8.10.0+3760+4dd778f9.x86_64.rpm