Red Hat Security Advisory: golang security, bug fix, and enhancement update
An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5741US | critical9.8 | — | ||
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a… | ||||
| CVE-2015-5740US | critical9.8 | — | ||
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a… | ||||
| CVE-2015-5739US | critical9.8 | — | ||
The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers to conduct HTTP request smuggling attacks… | ||||
| CVE-2016-5386US | high8.1 | — | ||
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of… | ||||
| CVE-2016-3959US | high7.5 | Exploit | ||
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote at… | ||||
references
External citations — patches, advisories, analysis.
remediations (35)
- Fixedgolang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538 - Fixedgolang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1538
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan