Red Hat Security Advisory

RHSA-2020:0101

go-toolset-1.12-golang security update

Released 2020-01-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.12-1.12.12-4.el7, go-toolset-1.12-build-1.12.12-4.el7, go-toolset-1.12-golang-1.12.12-4.el7 +7
Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.12-1.12.12-4.el7, go-toolset-1.12-build-1.12.12-4.el7, go-toolset-1.12-golang-1.12.12-4.el7 +7

TI-2019-12251 CVE-2019-16276 · GHSA-xv7j-jr8q-mhmm

MEDIUM 41

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05299 Published 2019-09-30 Partial fix CWE-444

TI-2019-13132 CVE-2019-17596 · GHSA-gcr4-wcqh-3624

MEDIUM 40

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04693 Published 2019-10-24 Partial fix CWE-436