RHSA-2021:5176: Important: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.Security Fix(es): golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716) golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Rebase Go to 1.16.12 [devtools-2021.4.z] (BZ#2031148)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-build-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-bin-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-docs-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-misc-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-race-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-src-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-golang-tests-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-runtime-1.16.12-1.el7_9 - Upgrade
Upgrade
redhat/go-toolsetto a version that resolves this vulnerability.Fixed in 1.16-scldevel-1.16.12-1.el7_9 - Upgrade
Upgrade
golangto a version that resolves this vulnerability.Fixed in 1.16.12
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:5176?
The severity of RHSA-2021:5176 is categorized as moderate.
How do I fix RHSA-2021:5176?
To fix RHSA-2021:5176, upgrade to Go Toolset version 1.16-1.16.12-1.el7_9.
What vulnerabilities are addressed in RHSA-2021:5176?
RHSA-2021:5176 addresses vulnerabilities related to the header canonicalization cache in the Go programming language.
Which systems are affected by RHSA-2021:5176?
RHSA-2021:5176 affects systems running version 1.16 of the Go Toolset on Red Hat Enterprise Linux.
When was RHSA-2021:5176 released?
RHSA-2021:5176 was released on December 8, 2021.