Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Go Toolset on Red Hat Enterprise Linux 8 Has Security Flaw

published 6 months ago
Summary

The Go toolset on Red Hat Enterprise Linux 8 has a security flaw that could allow an attacker to run malicious code on your system. This could lead to unauthorized access and potentially allow an attacker to take control of your system. You should update the Go toolset to the latest version to fix this issue.

What to do
  • Update redhat delve to version 0:1.25.2-1.module+el8.10.0+23746+9db33b5e.
  • Update redhat delve-debuginfo to version 0:1.25.2-1.module+el8.10.0+23746+9db33b5e.
  • Update redhat delve-debugsource to version 0:1.25.2-1.module+el8.10.0+23746+9db33b5e.
  • Update redhat go-toolset to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-bin to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-docs to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-misc to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-race to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-src to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
  • Update redhat golang-tests to version 0:1.25.9-1.module+el8.10.0+24226+c418b32c.
Affected software
Ecosystem VendorProductAffected versions
Red Hat:enterprise_linux:8::appstream redhat delve < 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Fix: upgrade to 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Red Hat:enterprise_linux:8::appstream redhat delve-debuginfo < 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Fix: upgrade to 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Red Hat:enterprise_linux:8::appstream redhat delve-debugsource < 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Fix: upgrade to 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
Red Hat:enterprise_linux:8::appstream redhat go-toolset < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-bin < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-docs < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-misc < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-race < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-src < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Red Hat:enterprise_linux:8::appstream redhat golang-tests < 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Fix: upgrade to 0:1.25.9-1.module+el8.10.0+24226+c418b32c
Original advisory text
Red Hat Security Advisory: go-toolset:rhel8 security update
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.0 Critical
Timeline
Published6 May 2026
Updated7 May 2026
First seen7 May 2026
Sources
RHSA-2026:10704 · OSV
Track software like this
Free during beta