Red Hat Security Advisory

RHSA-2025:10677

golang security update

Released 2025-07-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.24.4-1.el10_0, golang-1.24.4-1.el10_0, golang-bin-1.24.4-1.el10_0 +5

TI-2025-16746 CVE-2025-22874 · GHSA-6f52-wpx2-hvf2

LOW 39

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00376 Published 2025-06-11 Partial fix · 1.24.4

TI-2025-04171 CVE-2025-4673 · GHSA-62jj-gr2r-5c34

LOW 31

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00669 Published 2025-06-11 Partial fix · 1.23.10, 1.24.4