Headline

RHSA-2023:3319: Red Hat Security Advisory: go-toolset:rhel8 security update

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2023-24540: A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set “\t\n\f\r\u0020\u2028\u2029” in JavaScript contexts that also contain actions may not be properly sanitized during execution.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: go-toolset:rhel8 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux Server - AUS 8.8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

BZ - 2196027 - CVE-2023-24540 golang: html/template: improper handling of JavaScript whitespace

Red Hat Enterprise Linux for x86_64 8

SRPM

delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src.rpm

SHA-256: 1b037c6c0f16e789c9cf361b6cf87e5e06661e7f29deae013bb1ede7f3c1ff93

go-toolset-1.19.9-1.module+el8.8.0+18857+fca43658.src.rpm

SHA-256: e01060bc9d00202d35a6edc2b57253c8fdbf1e6c3264d9d670d672f7826f37ee

golang-1.19.9-1.module+el8.8.0+18857+fca43658.src.rpm

SHA-256: 57ca3a68f55dc3b731e452f5df9535295f34e729455b929aaa6434c8d3c9e6be

x86_64

golang-docs-1.19.9-1.module+el8.8.0+18857+fca43658.noarch.rpm

SHA-256: 9b68bb41e6d5f585e3264a67aebf476b25940e91dd13b7a219eb6f761ecfc5a2

golang-misc-1.19.9-1.module+el8.8.0+18857+fca43658.noarch.rpm

SHA-256: c3f18b5e3540ad12f6f1cf372bdf80c7401bebb7d58017943771f64362704581

golang-src-1.19.9-1.module+el8.8.0+18857+fca43658.noarch.rpm

SHA-256: 8354146ef39549ef4878df3b57db4bd5dde6ec2959ec9534eb8824bcf7adf7ad

golang-tests-1.19.9-1.module+el8.8.0+18857+fca43658.noarch.rpm

SHA-256: e9621ffeaed9387e03529d92709a054335a677f9e70b6cdcc4a588a60767db65

delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64.rpm

SHA-256: e63fbb1595650d32386fe757c131a9475710f50f3df6c673b9ee3d7da17fb40b

delve-debuginfo-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64.rpm

SHA-256: 10cbdf420e26f44c6a556c9bac32f8d4d9f55f2c1294009710248550c0ed1528

delve-debugsource-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64.rpm

SHA-256: b9ec866e5579c7683dfc4a6efd2fb41b21e3635de5fac94c4f9870f647f9c869

go-toolset-1.19.9-1.module+el8.8.0+18857+fca43658.x86_64.rpm

SHA-256: 67ec5f5ff6e4a3bdda45c84920597fac1d57770740fb6b6fce12c76c60729ae9

golang-1.19.9-1.module+el8.8.0+18857+fca43658.x86_64.rpm

SHA-256: 9fe3786fedc0a4c93055aa1176b9617189647bfa73d58e4aac1a24f1673eacd0

golang-bin-1.19.9-1.module+el8.8.0+18857+fca43658.x86_64.rpm

SHA-256: 5dd995fb9bfbd6e7be6a1a2770dad273357505d6bd7ee60df3bdc402a889ea68

golang-race-1.19.9-1.module+el8.8.0+18857+fca43658.x86_64.rpm

SHA-256: e9a8b79a235675fde037e18d430e5f9b9c0eea40747ab4241f57f3a7b8729cc4

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8