TI-2025-04172 CVE-2025-4674 · GHSA-wprm-fgrx-xj42
Unexpected command execution in untrusted VCS repositories in cmd/go
Priority MEDIUM 40
The go command may execute unexpected commands when operating in untrusted VCS repositories.
RHSA-2025:14093
go-toolset:rhel8 security update
Released 2025-08-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+22903+37387f31.ppc64le::go-toolset:rhel8 +12
- Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+22903+37387f31.src::go-toolset:rhel8 +9