rhsa-2024_6908
Vulnerability from csaf_redhat
Published
2024-09-23 01:53
Modified
2024-12-18 04:14
Summary
Red Hat Security Advisory: go-toolset:rhel8 security update
Notes
Topic
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\n* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)\n\n* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)\n\n* go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:6908",
"url": "https://access.redhat.com/errata/RHSA-2024:6908"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2295310",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
},
{
"category": "external",
"summary": "2310527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310527"
},
{
"category": "external",
"summary": "2310528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
},
{
"category": "external",
"summary": "2310529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310529"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6908.json"
}
],
"title": "Red Hat Security Advisory: go-toolset:rhel8 security update",
"tracking": {
"current_release_date": "2024-12-18T04:14:54+00:00",
"generator": {
"date": "2024-12-18T04:14:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:6908",
"initial_release_date": "2024-09-23T01:53:18+00:00",
"revision_history": [
{
"date": "2024-09-23T01:53:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-09-23T01:53:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-18T04:14:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset:rhel8:8100020240918165244:a3795dee",
"product": {
"name": "go-toolset:rhel8:8100020240918165244:a3795dee",
"product_id": "go-toolset:rhel8:8100020240918165244:a3795dee",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/go-toolset@rhel8:8100020240918165244:a3795dee"
}
}
},
{
"category": "product_version",
"name": "golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product": {
"name": "golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_id": "golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product": {
"name": "golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_id": "golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product": {
"name": "golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_id": "golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product": {
"name": "golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_id": "golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"product": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"product_id": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=src"
}
}
},
{
"category": "product_version",
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"product": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"product_id": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.21.13-1.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=src"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"product": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"product_id": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.21.13-1.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_id": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.21.13-1.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_id": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debuginfo@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/delve-debugsource@1.21.2-4.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.21.13-1.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_id": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"product": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_id": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.21.13-1.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_id": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_id": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.21.13-2.module%2Bel8.10.0%2B22329%2B6cd5c9c6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
"product_reference": "go-toolset:rhel8:8100020240918165244:a3795dee",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src"
},
"product_reference": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x"
},
"product_reference": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src"
},
"product_reference": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x"
},
"product_reference": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src"
},
"product_reference": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64"
},
"product_reference": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le"
},
"product_reference": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x"
},
"product_reference": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64 as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64"
},
"product_reference": "golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
},
"product_reference": "golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
},
"product_reference": "golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
},
"product_reference": "golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch as a component of go-toolset:rhel8:8100020240918165244:a3795dee as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
},
"product_reference": "golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-24791",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2295310"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: Denial of service due to improper 100-continue handling in net/http",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An attacker would need to control a malicious server and induce a client to connect to it, requiring some amount of preparation outside of the attacker\u0027s control. This reduces the severity score of this flaw to Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24791"
},
{
"category": "external",
"summary": "RHBZ#2295310",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24791",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
},
{
"category": "external",
"summary": "https://go.dev/cl/591255",
"url": "https://go.dev/cl/591255"
},
{
"category": "external",
"summary": "https://go.dev/issue/67555",
"url": "https://go.dev/issue/67555"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ",
"url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
}
],
"release_date": "2024-07-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-23T01:53:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6908"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http: Denial of service due to improper 100-continue handling in net/http"
},
{
"cve": "CVE-2024-34155",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-09-06T21:20:06.929766+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310527"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34155"
},
{
"category": "external",
"summary": "RHBZ#2310527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34155"
},
{
"category": "external",
"summary": "https://go.dev/cl/611238",
"url": "https://go.dev/cl/611238"
},
{
"category": "external",
"summary": "https://go.dev/issue/69138",
"url": "https://go.dev/issue/69138"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3105",
"url": "https://pkg.go.dev/vuln/GO-2024-3105"
}
],
"release_date": "2024-09-06T21:15:11.947000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-23T01:53:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6908"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion"
},
{
"cve": "CVE-2024-34156",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-09-06T21:20:09.377905+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Go\u0027s `encoding/gob` package is of high severity because it exposes applications to potential Denial of Service (DoS) attacks through stack exhaustion. Since `gob` relies on recursive function calls to decode nested structures, an attacker could exploit this by sending crafted messages with excessively deep nesting, causing the application to panic due to stack overflow. This risk is particularly important in scenarios where untrusted or external input is processed, as it can lead to system unavailability or crashes, undermining the reliability and availability of services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "RHBZ#2310528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://go.dev/cl/611239",
"url": "https://go.dev/cl/611239"
},
{
"category": "external",
"summary": "https://go.dev/issue/69139",
"url": "https://go.dev/issue/69139"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3106",
"url": "https://pkg.go.dev/vuln/GO-2024-3106"
}
],
"release_date": "2024-09-06T21:15:12.020000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-23T01:53:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6908"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion"
},
{
"cve": "CVE-2024-34158",
"cwe": {
"id": "CWE-1325",
"name": "Improperly Controlled Sequential Memory Allocation"
},
"discovery_date": "2024-09-06T21:20:12.126400+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310529"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the go/build/constraint package of the Golang standard library. Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34158"
},
{
"category": "external",
"summary": "RHBZ#2310529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310529"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34158",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34158"
},
{
"category": "external",
"summary": "https://go.dev/cl/611240",
"url": "https://go.dev/cl/611240"
},
{
"category": "external",
"summary": "https://go.dev/issue/69141",
"url": "https://go.dev/issue/69141"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3107",
"url": "https://pkg.go.dev/vuln/GO-2024-3107"
}
],
"release_date": "2024-09-06T21:15:12.083000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-23T01:53:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6908"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debuginfo-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:delve-debugsource-0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:go-toolset-0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.src",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-bin-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-docs-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-misc-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-src-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch",
"AppStream-8.10.0.Z.MAIN.EUS:go-toolset:rhel8:8100020240918165244:a3795dee:golang-tests-0:1.21.13-2.module+el8.10.0+22329+6cd5c9c6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.