RHSA-2020:5333: Moderate: go-toolset-1.14-golang security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.Security Fix(es): golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362) golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366) golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:5333?
The severity of RHSA-2020:5333 is classified as important.
What vulnerabilities are addressed in RHSA-2020:5333?
RHSA-2020:5333 addresses vulnerabilities related to CVE-2020-28362 and potentially malicious symbol names.
How do I fix RHSA-2020:5333?
To fix RHSA-2020:5333, you should update to the specified remedial version of the go-toolset package.
Which versions of go-toolset are affected by RHSA-2020:5333?
Versions of go-toolset prior to 1.14-1.14.12-1.el7_9 are affected by RHSA-2020:5333.
How does RHSA-2020:5333 impact my applications?
RHSA-2020:5333 may impact applications that rely on the Go programming language tools and libraries if they are using the affected versions.