ELSA-2024-6908

ELSA-2024-6908 - go-toolset:ol8 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-09-23

Description

delve
[1.21.2-4.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)

[1.21.2-4]
- Skip tests in %check due to incompatible Go version in buildroot (temporary).
- Resolves: RHEL-59518

golang
[1.21.13-2]
- Rebuild Go with CVE Fixes
- Remove fix-memleak-setupRSA.patch (exists upstream)
- Resolves: RHEL-58223
- Resolves: RHEL-57961
- Resolves: RHEL-57847
- Resolves: RHEL-57860

[1.21.13-1]
- Update to Go1.21.13 to fix CVE-2024-24791
- Resolves: RHEL-47198

go-toolset
[1.21.13-1]
- Fix CVE-2024-24791
- Resolves: RHEL-47198

Related CVEs

CVE-2024-34156

CVE-2024-24791

CVE-2024-34158

CVE-2024-34155

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.src.rpm	4fffd70e6e51f8680fae098b549109f5	-	ol8_aarch64_appstream
	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.src.rpm	125bb947027ab24d1e3fde563cdaf5e4	-	ol8_aarch64_appstream
	golang-1.21.13-2.module+el8.10.0+90407+20770c94.src.rpm	4ffd426989794f0a3d504bd279ddd0b6	-	ol8_aarch64_appstream
	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.aarch64.rpm	ae43e527d4a724f13da8b3ed8308de8d	-	ol8_aarch64_appstream
	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.aarch64.rpm	5d045ab38b4ee9bf97e67a96ce059119	-	ol8_aarch64_appstream
	golang-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm	f382bf3794456c2c69705c3f23dc282b	-	ol8_aarch64_appstream
	golang-bin-1.21.13-2.module+el8.10.0+90407+20770c94.aarch64.rpm	1964fb3f287fadcd1fedd8e2d868626e	-	ol8_aarch64_appstream
	golang-docs-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	7fb76ea05f264d9c3e46a2659859111a	-	ol8_aarch64_appstream
	golang-misc-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	ca3c1f7f2386e64c721a2268b94111aa	-	ol8_aarch64_appstream
	golang-src-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	a802210f5b57b2bf4ad075675ed7c190	-	ol8_aarch64_appstream
	golang-tests-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	494057ee4ba4e87140de16ba2b99ee4a	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.src.rpm	4fffd70e6e51f8680fae098b549109f5	-	ol8_x86_64_appstream
	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.src.rpm	125bb947027ab24d1e3fde563cdaf5e4	-	ol8_x86_64_appstream
	golang-1.21.13-2.module+el8.10.0+90407+20770c94.src.rpm	4ffd426989794f0a3d504bd279ddd0b6	-	ol8_x86_64_appstream
	delve-1.21.2-4.0.1.module+el8.10.0+90407+20770c94.x86_64.rpm	d56bc7d7b652bee67ee9e1dcd920e240	-	ol8_x86_64_appstream
	go-toolset-1.21.13-1.module+el8.10.0+90407+20770c94.x86_64.rpm	92ca9d4a4093aaa1dd675999d9958990	-	ol8_x86_64_appstream
	golang-1.21.13-2.module+el8.10.0+90407+20770c94.x86_64.rpm	4b794bf7720bb71208951c484314658f	-	ol8_x86_64_appstream
	golang-bin-1.21.13-2.module+el8.10.0+90407+20770c94.x86_64.rpm	573d12877e4b15857eefd11683965fdd	-	ol8_x86_64_appstream
	golang-docs-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	7fb76ea05f264d9c3e46a2659859111a	-	ol8_x86_64_appstream
	golang-misc-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	ca3c1f7f2386e64c721a2268b94111aa	-	ol8_x86_64_appstream
	golang-src-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	a802210f5b57b2bf4ad075675ed7c190	-	ol8_x86_64_appstream
	golang-tests-1.21.13-2.module+el8.10.0+90407+20770c94.noarch.rpm	494057ee4ba4e87140de16ba2b99ee4a	-	ol8_x86_64_appstream