ELSA-2024-6913

ELSA-2024-6913 - golang security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-09-23

Description

[1.21.13-3]
- Related: RHEL-58226

[1.21.13-2]
- Rebuild Go with CVE Fixes
- Remove fix-memleak-setupRSA.patch (exists upstream)
- Resolves: RHEL-58226
- Resolves: RHEL-57962
- Resolves: RHEL-57848
- Resolves: RHEL-57865

[1.21.13-1]
- Rebase to Go1.21.13 to pick the fix for CVE-2024-24791
- Technically Go1.21.12 contains the fix for the CVE but there was another
latest release so rebasing to that
- Resolves: RHEL-53547

Related CVEs

CVE-2024-34156

CVE-2024-24791

CVE-2024-34155

CVE-2024-34158

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	golang-1.21.13-3.el9_4.src.rpm	2bbdd8352d643422c8aff08b18cf2ac2dc60c21f6ea0b312d0c26d6657c5f269	-	ol9_aarch64_appstream
	go-toolset-1.21.13-3.el9_4.aarch64.rpm	9d9b4f8b621a443029e6031b0f0d4d88a417cefd68a95a32ce25b731a9e574fa	-	ol9_aarch64_appstream
	golang-1.21.13-3.el9_4.aarch64.rpm	a6740bcd9361c3a358a9a27d143da690db673fc3c2a0ff1f9528a6cd239d8e67	-	ol9_aarch64_appstream
	golang-bin-1.21.13-3.el9_4.aarch64.rpm	a05e931e9be46c143ca2174559b49e549bbcc172827da48361973f079ced61fa	-	ol9_aarch64_appstream
	golang-docs-1.21.13-3.el9_4.noarch.rpm	9571c9236c581f0afb8270efb84a87730ec6ee641c872ffa815e20f4876802e9	-	ol9_aarch64_appstream
	golang-misc-1.21.13-3.el9_4.noarch.rpm	88c627f0b3fca7f40f4741dbb822ea920ed241108f6e802a0900d75d7fbe76e4	-	ol9_aarch64_appstream
	golang-src-1.21.13-3.el9_4.noarch.rpm	c6e82dba7ac0d834f5e9b1b62ca74f5fbdd5ae55b3c9cdc89b9ea421a9a98174	-	ol9_aarch64_appstream
	golang-tests-1.21.13-3.el9_4.noarch.rpm	7e8dd05863e7af3e30be0f2f7cbccd833bf20b354eb914cb06bd608e90428010	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	golang-1.21.13-3.el9_4.src.rpm	2bbdd8352d643422c8aff08b18cf2ac2dc60c21f6ea0b312d0c26d6657c5f269	-	ol9_x86_64_appstream
	go-toolset-1.21.13-3.el9_4.x86_64.rpm	cd4dd710d8db874347524f5b907e4d319cc8f3009ce9a8b467bc7151778653f0	-	ol9_x86_64_appstream
	golang-1.21.13-3.el9_4.x86_64.rpm	73440d6efaa13226d4a2c37a6e9e4d216f5d64765233924b37166aa66dc65a71	-	ol9_x86_64_appstream
	golang-bin-1.21.13-3.el9_4.x86_64.rpm	56b14b9e1c21f071342bdf18ca4b5a40dfbcd003d69fdde7972d65ac55437142	-	ol9_x86_64_appstream
	golang-docs-1.21.13-3.el9_4.noarch.rpm	9571c9236c581f0afb8270efb84a87730ec6ee641c872ffa815e20f4876802e9	-	ol9_x86_64_appstream
	golang-misc-1.21.13-3.el9_4.noarch.rpm	88c627f0b3fca7f40f4741dbb822ea920ed241108f6e802a0900d75d7fbe76e4	-	ol9_x86_64_appstream
	golang-src-1.21.13-3.el9_4.noarch.rpm	c6e82dba7ac0d834f5e9b1b62ca74f5fbdd5ae55b3c9cdc89b9ea421a9a98174	-	ol9_x86_64_appstream
	golang-tests-1.21.13-3.el9_4.noarch.rpm	7e8dd05863e7af3e30be0f2f7cbccd833bf20b354eb914cb06bd608e90428010	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team