Synopsis

Important: go-toolset-1.11 and go-toolset-1.11-golang security update

Type/Severity

Security Advisory: Important

Topic

An update for go-toolset-1.11 and go-toolset-1.11-golang is now available for Red Hat Developer Tools.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

• HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)
  
• HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Developer Tools (for RHEL Workstation) 1 x86_64
• Red Hat Developer Tools (for RHEL Server) 1 x86_64
• Red Hat Developer Tools (for RHEL Server for System Z) 1 s390x
• Red Hat Developer Tools (for RHEL Server for IBM Power LE) 1 ppc64le
• Red Hat Developer Tools (for RHEL Server for ARM) 1 aarch64

Fixes

• BZ - 1735645 - CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth
• BZ - 1735744 - CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth

CVEs

• CVE-2019-9512
• CVE-2019-9514

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Developer Tools (for RHEL Workstation) 1

SRPM
go-toolset-1.11-1.11.13-1.el7.src.rpm	SHA-256: cb471f4f081cdd77c8e7431c28a225df6b0b2d4ab3bdf9db1d639a9b9f581966
go-toolset-1.11-golang-1.11.13-2.el7.src.rpm	SHA-256: 2ad4c253cafc8dd87c4ad7513d27057385bced59bcb89fab9fd2463376d86366
x86_64
go-toolset-1.11-1.11.13-1.el7.x86_64.rpm	SHA-256: 2f879b15c8a3cda87461d87eaa29fb10f5dd278e41430f511df92e74cff4e213
go-toolset-1.11-build-1.11.13-1.el7.x86_64.rpm	SHA-256: 68d92ea9e788a44b83a7502644ef842f5f7e41919fe33a5d255dcb8a5e660bf1
go-toolset-1.11-golang-1.11.13-2.el7.x86_64.rpm	SHA-256: e7f166185e6af6a8748134763123ac0b562d8f9b07ea209b6008ee364422bed2
go-toolset-1.11-golang-bin-1.11.13-2.el7.x86_64.rpm	SHA-256: 841047269578181cb1ec1ff7840b74a73ede889de7136f319a924241e8b89e7e
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-misc-1.11.13-2.el7.x86_64.rpm	SHA-256: bf8d531a6faadab38b6864de4df37ef03954fc3e13b635fed68321a0c34fadd3
go-toolset-1.11-golang-race-1.11.13-2.el7.x86_64.rpm	SHA-256: f92288d75dc768654e91963602704406e179e9b76766390434c61a5d29a1ba18
go-toolset-1.11-golang-src-1.11.13-2.el7.x86_64.rpm	SHA-256: 31699eb4ccf8a0061b27430f8eaa324f4f0b45a41c0d1ece494f4fb82b3b9fea
go-toolset-1.11-golang-tests-1.11.13-2.el7.x86_64.rpm	SHA-256: 8f3b7c3f608426196674f9d1aa4049d06500f7d1b79666191503740206d971e8
go-toolset-1.11-runtime-1.11.13-1.el7.x86_64.rpm	SHA-256: cbc9018c860c464da40818d69c45c221f7edb5ab171288806e2995f34b8414b7
go-toolset-1.11-scldevel-1.11.13-1.el7.x86_64.rpm	SHA-256: 9b4a6aaf5f63eddc54c3e4b5b7a5fa1af5d74f4c604d57d9615e59c1b4e08648

Red Hat Developer Tools (for RHEL Server) 1

SRPM
go-toolset-1.11-1.11.13-1.el7.src.rpm	SHA-256: cb471f4f081cdd77c8e7431c28a225df6b0b2d4ab3bdf9db1d639a9b9f581966
go-toolset-1.11-golang-1.11.13-2.el7.src.rpm	SHA-256: 2ad4c253cafc8dd87c4ad7513d27057385bced59bcb89fab9fd2463376d86366
x86_64
go-toolset-1.11-1.11.13-1.el7.x86_64.rpm	SHA-256: 2f879b15c8a3cda87461d87eaa29fb10f5dd278e41430f511df92e74cff4e213
go-toolset-1.11-build-1.11.13-1.el7.x86_64.rpm	SHA-256: 68d92ea9e788a44b83a7502644ef842f5f7e41919fe33a5d255dcb8a5e660bf1
go-toolset-1.11-golang-1.11.13-2.el7.x86_64.rpm	SHA-256: e7f166185e6af6a8748134763123ac0b562d8f9b07ea209b6008ee364422bed2
go-toolset-1.11-golang-bin-1.11.13-2.el7.x86_64.rpm	SHA-256: 841047269578181cb1ec1ff7840b74a73ede889de7136f319a924241e8b89e7e
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-misc-1.11.13-2.el7.x86_64.rpm	SHA-256: bf8d531a6faadab38b6864de4df37ef03954fc3e13b635fed68321a0c34fadd3
go-toolset-1.11-golang-race-1.11.13-2.el7.x86_64.rpm	SHA-256: f92288d75dc768654e91963602704406e179e9b76766390434c61a5d29a1ba18
go-toolset-1.11-golang-src-1.11.13-2.el7.x86_64.rpm	SHA-256: 31699eb4ccf8a0061b27430f8eaa324f4f0b45a41c0d1ece494f4fb82b3b9fea
go-toolset-1.11-golang-tests-1.11.13-2.el7.x86_64.rpm	SHA-256: 8f3b7c3f608426196674f9d1aa4049d06500f7d1b79666191503740206d971e8
go-toolset-1.11-runtime-1.11.13-1.el7.x86_64.rpm	SHA-256: cbc9018c860c464da40818d69c45c221f7edb5ab171288806e2995f34b8414b7
go-toolset-1.11-scldevel-1.11.13-1.el7.x86_64.rpm	SHA-256: 9b4a6aaf5f63eddc54c3e4b5b7a5fa1af5d74f4c604d57d9615e59c1b4e08648

Red Hat Developer Tools (for RHEL Server for System Z) 1

SRPM
go-toolset-1.11-1.11.13-1.el7.src.rpm	SHA-256: cb471f4f081cdd77c8e7431c28a225df6b0b2d4ab3bdf9db1d639a9b9f581966
go-toolset-1.11-golang-1.11.13-2.el7.src.rpm	SHA-256: 2ad4c253cafc8dd87c4ad7513d27057385bced59bcb89fab9fd2463376d86366
s390x
go-toolset-1.11-1.11.13-1.el7.s390x.rpm	SHA-256: ed82d8af74d30804674ef8cf0dc94e5083c95073240825f810f1fcf308bfe780
go-toolset-1.11-1.11.13-1.el7.s390x.rpm	SHA-256: ed82d8af74d30804674ef8cf0dc94e5083c95073240825f810f1fcf308bfe780
go-toolset-1.11-build-1.11.13-1.el7.s390x.rpm	SHA-256: a66068f59d83158e6c0c50b17768eba2e546b396a4ab310008de337ad68796ac
go-toolset-1.11-build-1.11.13-1.el7.s390x.rpm	SHA-256: a66068f59d83158e6c0c50b17768eba2e546b396a4ab310008de337ad68796ac
go-toolset-1.11-golang-1.11.13-2.el7.s390x.rpm	SHA-256: b7a47526b992975940d19e69c6fa2c0c87114bf349141ae5c1a018ef731613ca
go-toolset-1.11-golang-1.11.13-2.el7.s390x.rpm	SHA-256: b7a47526b992975940d19e69c6fa2c0c87114bf349141ae5c1a018ef731613ca
go-toolset-1.11-golang-bin-1.11.13-2.el7.s390x.rpm	SHA-256: 95dce9a11b873aa85b4709a89f800037a620721f97d3b4bb6f1f811e7e01b748
go-toolset-1.11-golang-bin-1.11.13-2.el7.s390x.rpm	SHA-256: 95dce9a11b873aa85b4709a89f800037a620721f97d3b4bb6f1f811e7e01b748
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-misc-1.11.13-2.el7.s390x.rpm	SHA-256: 1591baf709ef984b82b990f341ef594024b4c9fe934cbec6d34e28eff9800c5d
go-toolset-1.11-golang-misc-1.11.13-2.el7.s390x.rpm	SHA-256: 1591baf709ef984b82b990f341ef594024b4c9fe934cbec6d34e28eff9800c5d
go-toolset-1.11-golang-src-1.11.13-2.el7.s390x.rpm	SHA-256: bab63b787897f1afbfa7ac452fbb16e678c5cd42e7dba9b857a22dbffe53c41d
go-toolset-1.11-golang-src-1.11.13-2.el7.s390x.rpm	SHA-256: bab63b787897f1afbfa7ac452fbb16e678c5cd42e7dba9b857a22dbffe53c41d
go-toolset-1.11-golang-tests-1.11.13-2.el7.s390x.rpm	SHA-256: bb8e154ac33cddeabf35140f24239fc7c0f50f7366ed44697f0b7212bb7683ab
go-toolset-1.11-golang-tests-1.11.13-2.el7.s390x.rpm	SHA-256: bb8e154ac33cddeabf35140f24239fc7c0f50f7366ed44697f0b7212bb7683ab
go-toolset-1.11-runtime-1.11.13-1.el7.s390x.rpm	SHA-256: 1cd8c1d599454fe00d4cb296cacd33ed462c61c8fe96d68b671b17e423ce1b7e
go-toolset-1.11-runtime-1.11.13-1.el7.s390x.rpm	SHA-256: 1cd8c1d599454fe00d4cb296cacd33ed462c61c8fe96d68b671b17e423ce1b7e
go-toolset-1.11-scldevel-1.11.13-1.el7.s390x.rpm	SHA-256: 0626b47e95a3e39800ac53db9b44600abd5100e869821eed076cfa2293967375
go-toolset-1.11-scldevel-1.11.13-1.el7.s390x.rpm	SHA-256: 0626b47e95a3e39800ac53db9b44600abd5100e869821eed076cfa2293967375

Red Hat Developer Tools (for RHEL Server for IBM Power LE) 1

SRPM
go-toolset-1.11-1.11.13-1.el7.src.rpm	SHA-256: cb471f4f081cdd77c8e7431c28a225df6b0b2d4ab3bdf9db1d639a9b9f581966
go-toolset-1.11-golang-1.11.13-2.el7.src.rpm	SHA-256: 2ad4c253cafc8dd87c4ad7513d27057385bced59bcb89fab9fd2463376d86366
ppc64le
go-toolset-1.11-1.11.13-1.el7.ppc64le.rpm	SHA-256: 95191e55e3fdd20fa8ff1c8f6b3c757e3359cbcb6860e866c9145c1d0f0cfdca
go-toolset-1.11-1.11.13-1.el7.ppc64le.rpm	SHA-256: 95191e55e3fdd20fa8ff1c8f6b3c757e3359cbcb6860e866c9145c1d0f0cfdca
go-toolset-1.11-build-1.11.13-1.el7.ppc64le.rpm	SHA-256: 175c576e94dcb0e102304cb99a0795ac043da4cdd381db8c14147689edeb4cf8
go-toolset-1.11-build-1.11.13-1.el7.ppc64le.rpm	SHA-256: 175c576e94dcb0e102304cb99a0795ac043da4cdd381db8c14147689edeb4cf8
go-toolset-1.11-golang-1.11.13-2.el7.ppc64le.rpm	SHA-256: 28e9c8d54f6fad478ab454f5ec6b3aff4962370b4bc3b6acc9c23e0233aebc07
go-toolset-1.11-golang-1.11.13-2.el7.ppc64le.rpm	SHA-256: 28e9c8d54f6fad478ab454f5ec6b3aff4962370b4bc3b6acc9c23e0233aebc07
go-toolset-1.11-golang-bin-1.11.13-2.el7.ppc64le.rpm	SHA-256: 0c719e07e3e880610f42665483ddebb0df535e58815fb78244af6a1f87eda979
go-toolset-1.11-golang-bin-1.11.13-2.el7.ppc64le.rpm	SHA-256: 0c719e07e3e880610f42665483ddebb0df535e58815fb78244af6a1f87eda979
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-misc-1.11.13-2.el7.ppc64le.rpm	SHA-256: 665a8e8f2e330bae2555f090b2631957e3bd7baf836649c39fbe667cbddf8056
go-toolset-1.11-golang-misc-1.11.13-2.el7.ppc64le.rpm	SHA-256: 665a8e8f2e330bae2555f090b2631957e3bd7baf836649c39fbe667cbddf8056
go-toolset-1.11-golang-src-1.11.13-2.el7.ppc64le.rpm	SHA-256: 949ded7d4b314d83a2d498b22a075a9dd7a982af875e5161cd513fb6ff2f0334
go-toolset-1.11-golang-src-1.11.13-2.el7.ppc64le.rpm	SHA-256: 949ded7d4b314d83a2d498b22a075a9dd7a982af875e5161cd513fb6ff2f0334
go-toolset-1.11-golang-tests-1.11.13-2.el7.ppc64le.rpm	SHA-256: 3a21724906673c62c6692cc23d182e793a1b6a62d7255373b990d4fb786bfabd
go-toolset-1.11-golang-tests-1.11.13-2.el7.ppc64le.rpm	SHA-256: 3a21724906673c62c6692cc23d182e793a1b6a62d7255373b990d4fb786bfabd
go-toolset-1.11-runtime-1.11.13-1.el7.ppc64le.rpm	SHA-256: d26b9424ddcca145072b4fc7794f693bf78ecc8992d82a13fca5f33b25bae4e6
go-toolset-1.11-runtime-1.11.13-1.el7.ppc64le.rpm	SHA-256: d26b9424ddcca145072b4fc7794f693bf78ecc8992d82a13fca5f33b25bae4e6
go-toolset-1.11-scldevel-1.11.13-1.el7.ppc64le.rpm	SHA-256: 07f860b549b295c6b82efc4caeb1fb8fd396b5afaf39ff8b0bd6610127c4f0bc
go-toolset-1.11-scldevel-1.11.13-1.el7.ppc64le.rpm	SHA-256: 07f860b549b295c6b82efc4caeb1fb8fd396b5afaf39ff8b0bd6610127c4f0bc

Red Hat Developer Tools (for RHEL Server for ARM) 1

SRPM
go-toolset-1.11-1.11.13-1.el7.src.rpm	SHA-256: cb471f4f081cdd77c8e7431c28a225df6b0b2d4ab3bdf9db1d639a9b9f581966
go-toolset-1.11-golang-1.11.13-2.el7.src.rpm	SHA-256: 2ad4c253cafc8dd87c4ad7513d27057385bced59bcb89fab9fd2463376d86366
aarch64
go-toolset-1.11-1.11.13-1.el7.aarch64.rpm	SHA-256: a3a6ff84618b6351aaa9a2d54cc21965e9f04896288c36855b266ffb5d8248c4
go-toolset-1.11-build-1.11.13-1.el7.aarch64.rpm	SHA-256: 745bb00bba06152174a06a7c4809ba56225f1fda903543a1b82ffd5d272b60e3
go-toolset-1.11-golang-1.11.13-2.el7.aarch64.rpm	SHA-256: 129d9f8d3ab297e27c0677240c179bcd7cb9de5686f198e479f740a5551fd7ed
go-toolset-1.11-golang-bin-1.11.13-2.el7.aarch64.rpm	SHA-256: 931b62f9daacb3893e064b538bab03e9ebf4f96fbfb372293dc35b8179435eae
go-toolset-1.11-golang-docs-1.11.13-2.el7.noarch.rpm	SHA-256: 4c02cdfd34b68f12df9a3823c55208bb5ad4bb52f6c9452003c3f04e0c5ef08a
go-toolset-1.11-golang-misc-1.11.13-2.el7.aarch64.rpm	SHA-256: b460f66873d9a5dac694e5e112e04e78ac4a08539939fab89acb0b6161825797
go-toolset-1.11-golang-src-1.11.13-2.el7.aarch64.rpm	SHA-256: cd4a7480824de21d58e5f35612498eab4ead1d59f1058daa90cd343d42f3ff59
go-toolset-1.11-golang-tests-1.11.13-2.el7.aarch64.rpm	SHA-256: a16d17df06eaa8b265ac61b4c557e842ce8e2fa43f7d1212dc2824fd51090919
go-toolset-1.11-runtime-1.11.13-1.el7.aarch64.rpm	SHA-256: 47c275c86040d0a1d1d7b45cb7b85d6a5695f155142cf8c284b497cf72e3d5b9
go-toolset-1.11-scldevel-1.11.13-1.el7.aarch64.rpm	SHA-256: 976e55ed3aacf7e8ba332c955be9171a26173b2a51ba6b9130aa15f0d688b8c9