ELSA-2025-7466

ELSA-2025-7466 - delve and golang security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-06-27

Description

delve
[1.24.1-1.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)

[1.24.1-1]
- Update Delve to 1.24.1

[1.22.1-6]
- plans/ci.fmf: Update repo

golang
[1.23.7-1]
- Update to 1.23.7
- golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints (CVE-2024-45341)
- golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect (CVE-2024-45336)
- crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec (CVE-2025-22866)

Related CVEs

CVE-2025-22866

CVE-2024-45341

CVE-2024-45336

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	delve-1.24.1-1.0.1.el10_0.src.rpm	99d1b0d846d2a693a1c75bcc3a9cf9c01d710f60b50c88fcd3188666ea200e9b	-	ol10_aarch64_appstream
	golang-1.23.7-1.el10_0.src.rpm	58389968e3e5e73ee9f80e4e33c34316063917cea2d661cc936be08219a530cf	-	ol10_aarch64_appstream
	delve-1.24.1-1.0.1.el10_0.aarch64.rpm	2502de4b0d8ee831cb19f9bc78a6c526816fd415919053116fdc6d10b85bfe34	-	ol10_aarch64_appstream
	go-toolset-1.23.7-1.el10_0.aarch64.rpm	e62de4e8d306b392a908237d4d97ee4380570d6a4a82132e2f5f8f608b4778e3	-	ol10_aarch64_appstream
	golang-1.23.7-1.el10_0.aarch64.rpm	6c5d1cd4f8f1a2cd1c39e640ff1eed4ddf42b6e529b6715336acc20abbc91ff3	-	ol10_aarch64_appstream
	golang-bin-1.23.7-1.el10_0.aarch64.rpm	372bac022584d30cc7a15e4f4815743133b0049e2bf420dc5ad8b8b531ee0541	-	ol10_aarch64_appstream
	golang-docs-1.23.7-1.el10_0.noarch.rpm	c355da66b24deb8ef4ae20cc28193027ba6e1316cd37548866bfac06badd38cb	-	ol10_aarch64_appstream
	golang-misc-1.23.7-1.el10_0.noarch.rpm	9e61037bc752cf7c40e76bd87a5e365d8e661ded41a3ab17b3429429e6d8e2b6	-	ol10_aarch64_appstream
	golang-src-1.23.7-1.el10_0.noarch.rpm	1b5bcbd1d8176223cd44cd47ea999c97bdc08f87f7f42935d10258dbf29c6572	-	ol10_aarch64_appstream
	golang-tests-1.23.7-1.el10_0.noarch.rpm	adee8295125f83c37894cb366a654ebf5d6bdacf63c90297708b2440bf08f6ee	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	delve-1.24.1-1.0.1.el10_0.src.rpm	99d1b0d846d2a693a1c75bcc3a9cf9c01d710f60b50c88fcd3188666ea200e9b	-	ol10_x86_64_appstream
	golang-1.23.7-1.el10_0.src.rpm	58389968e3e5e73ee9f80e4e33c34316063917cea2d661cc936be08219a530cf	-	ol10_x86_64_appstream
	delve-1.24.1-1.0.1.el10_0.x86_64.rpm	90e390b1afec53bb398b4093d7833f63accfb1b0ade2cb39837a520809157aa1	-	ol10_x86_64_appstream
	go-toolset-1.23.7-1.el10_0.x86_64.rpm	139f38504a4d48fc1e269eb99506a39bdf1d517f5a01c4303c335fe7869df13e	-	ol10_x86_64_appstream
	golang-1.23.7-1.el10_0.x86_64.rpm	a3cc85f26c50a188126a4683d266616ee4b84d75496a11729a84cb4c8254d844	-	ol10_x86_64_appstream
	golang-bin-1.23.7-1.el10_0.x86_64.rpm	0db9e3ff827b6e7f963666053b8ace35e89d508f4a26dff6d52af29716a3b25f	-	ol10_x86_64_appstream
	golang-docs-1.23.7-1.el10_0.noarch.rpm	c355da66b24deb8ef4ae20cc28193027ba6e1316cd37548866bfac06badd38cb	-	ol10_x86_64_appstream
	golang-misc-1.23.7-1.el10_0.noarch.rpm	9e61037bc752cf7c40e76bd87a5e365d8e661ded41a3ab17b3429429e6d8e2b6	-	ol10_x86_64_appstream
	golang-src-1.23.7-1.el10_0.noarch.rpm	1b5bcbd1d8176223cd44cd47ea999c97bdc08f87f7f42935d10258dbf29c6572	-	ol10_x86_64_appstream
	golang-tests-1.23.7-1.el10_0.noarch.rpm	adee8295125f83c37894cb366a654ebf5d6bdacf63c90297708b2440bf08f6ee	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team