Red Hat Security AdvisoryRHSA-2021:3015
go-toolset-1.15 and go-toolset-1.15-golang security and bug fix update
Released 2021-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.15-1.15.14-1.el7_9, go-toolset-1.15-build-1.15.14-1.el7_9, go-toolset-1.15-golang-1.15.14-1.el7_9 +8
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.15-1.15.14-1.el7_9, go-toolset-1.15-build-1.15.14-1.el7_9, go-toolset-1.15-golang-1.15.14-1.el7_9 +8
Fixes 1 record
Priority LOW 39
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to c…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.06975 · Published 2021-07-15 · Partial fix CWE-295
