Red Hat Product Errata RHSA-2025:13941 - Security Advisory
Issued:
2025-08-18
Updated:
2025-08-18

RHSA-2025:13941 - Security Advisory

Synopsis

Important: golang security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for golang is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2384329 - CVE-2025-4674 cmd/go: Go VCS Command Execution Vulnerability

Red Hat Enterprise Linux for x86_64 10

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
x86_64
go-toolset-1.24.6-1.el10_0.x86_64.rpm SHA-256: 18fe1545fc2e8d293cd0693173141b1de5737d0b0c3f57c80523335a48033cb9
golang-1.24.6-1.el10_0.x86_64.rpm SHA-256: 151ecd5a9d5b019ed9961e257af130515d7ecd4b2bd4273fa34a4413157fdd24
golang-bin-1.24.6-1.el10_0.x86_64.rpm SHA-256: 54100f1131b35b70a3a9b7f9ef1726993259adc2f29977a2f6a958a6c4361228
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.x86_64.rpm SHA-256: ac49e88fd9ad42cde9caebbd2c45b0381a6c9ad509fea9c318f8ea878fe941b1
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
x86_64
go-toolset-1.24.6-1.el10_0.x86_64.rpm SHA-256: 18fe1545fc2e8d293cd0693173141b1de5737d0b0c3f57c80523335a48033cb9
golang-1.24.6-1.el10_0.x86_64.rpm SHA-256: 151ecd5a9d5b019ed9961e257af130515d7ecd4b2bd4273fa34a4413157fdd24
golang-bin-1.24.6-1.el10_0.x86_64.rpm SHA-256: 54100f1131b35b70a3a9b7f9ef1726993259adc2f29977a2f6a958a6c4361228
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.x86_64.rpm SHA-256: ac49e88fd9ad42cde9caebbd2c45b0381a6c9ad509fea9c318f8ea878fe941b1
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
s390x
go-toolset-1.24.6-1.el10_0.s390x.rpm SHA-256: 3554fe4a92bedf309cb5a73824ecf9ba6787bce0b3f25a917784e312391692e9
golang-1.24.6-1.el10_0.s390x.rpm SHA-256: 0f9b5e1ffe0595936750f697ea1a1b89d3f9033c3544ffa1d64031f33c9080c3
golang-bin-1.24.6-1.el10_0.s390x.rpm SHA-256: dcd4d772545cf6d9b3d3beea468298b68179d1f15df38c5324de5b62b1ee0daa
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.s390x.rpm SHA-256: 014ca9d892b4ea3b002a2d5a8463520739ac309b3abc3ddc878c0aa775876974
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
s390x
go-toolset-1.24.6-1.el10_0.s390x.rpm SHA-256: 3554fe4a92bedf309cb5a73824ecf9ba6787bce0b3f25a917784e312391692e9
golang-1.24.6-1.el10_0.s390x.rpm SHA-256: 0f9b5e1ffe0595936750f697ea1a1b89d3f9033c3544ffa1d64031f33c9080c3
golang-bin-1.24.6-1.el10_0.s390x.rpm SHA-256: dcd4d772545cf6d9b3d3beea468298b68179d1f15df38c5324de5b62b1ee0daa
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.s390x.rpm SHA-256: 014ca9d892b4ea3b002a2d5a8463520739ac309b3abc3ddc878c0aa775876974
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for Power, little endian 10

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
ppc64le
go-toolset-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 250606973f55862c49a79b748e61dc3f5f0e7a455924224dd60fe0388c637f67
golang-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 1095fb19d52497dbdc4cd2fcc078d219ba7bc694aa620ba6b542ac31f816a0c6
golang-bin-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 012256b3b70cbafd7d00f539e772649eb841b28b33d79c693b5c7801cd181d2c
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.ppc64le.rpm SHA-256: b0448b1a7b83c5a8dcca8c21e1fb5997d3c949d53a5b091b71a90745cb01b378
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
ppc64le
go-toolset-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 250606973f55862c49a79b748e61dc3f5f0e7a455924224dd60fe0388c637f67
golang-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 1095fb19d52497dbdc4cd2fcc078d219ba7bc694aa620ba6b542ac31f816a0c6
golang-bin-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 012256b3b70cbafd7d00f539e772649eb841b28b33d79c693b5c7801cd181d2c
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.ppc64le.rpm SHA-256: b0448b1a7b83c5a8dcca8c21e1fb5997d3c949d53a5b091b71a90745cb01b378
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for ARM 64 10

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
aarch64
go-toolset-1.24.6-1.el10_0.aarch64.rpm SHA-256: b22770b0047465e866f1a52f20e2160747c40d7c370892b0abe2c494986fd0e3
golang-1.24.6-1.el10_0.aarch64.rpm SHA-256: 1398b31a7e6a3eb76a3e437c782e591522ccdfbba231506d7ef570f27fd4d678
golang-bin-1.24.6-1.el10_0.aarch64.rpm SHA-256: a9899b87473edc54ad57fccde62eb49352e5b884c53a93c5e9e9a43fcb67d29a
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.aarch64.rpm SHA-256: 154fc1b3a5ebf40192e0aaa733c1510c7e8035b6b438a301ebcd113ba0c161c9
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
aarch64
go-toolset-1.24.6-1.el10_0.aarch64.rpm SHA-256: b22770b0047465e866f1a52f20e2160747c40d7c370892b0abe2c494986fd0e3
golang-1.24.6-1.el10_0.aarch64.rpm SHA-256: 1398b31a7e6a3eb76a3e437c782e591522ccdfbba231506d7ef570f27fd4d678
golang-bin-1.24.6-1.el10_0.aarch64.rpm SHA-256: a9899b87473edc54ad57fccde62eb49352e5b884c53a93c5e9e9a43fcb67d29a
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.aarch64.rpm SHA-256: 154fc1b3a5ebf40192e0aaa733c1510c7e8035b6b438a301ebcd113ba0c161c9
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
aarch64
go-toolset-1.24.6-1.el10_0.aarch64.rpm SHA-256: b22770b0047465e866f1a52f20e2160747c40d7c370892b0abe2c494986fd0e3
golang-1.24.6-1.el10_0.aarch64.rpm SHA-256: 1398b31a7e6a3eb76a3e437c782e591522ccdfbba231506d7ef570f27fd4d678
golang-bin-1.24.6-1.el10_0.aarch64.rpm SHA-256: a9899b87473edc54ad57fccde62eb49352e5b884c53a93c5e9e9a43fcb67d29a
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.aarch64.rpm SHA-256: 154fc1b3a5ebf40192e0aaa733c1510c7e8035b6b438a301ebcd113ba0c161c9
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
s390x
go-toolset-1.24.6-1.el10_0.s390x.rpm SHA-256: 3554fe4a92bedf309cb5a73824ecf9ba6787bce0b3f25a917784e312391692e9
golang-1.24.6-1.el10_0.s390x.rpm SHA-256: 0f9b5e1ffe0595936750f697ea1a1b89d3f9033c3544ffa1d64031f33c9080c3
golang-bin-1.24.6-1.el10_0.s390x.rpm SHA-256: dcd4d772545cf6d9b3d3beea468298b68179d1f15df38c5324de5b62b1ee0daa
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.s390x.rpm SHA-256: 014ca9d892b4ea3b002a2d5a8463520739ac309b3abc3ddc878c0aa775876974
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
ppc64le
go-toolset-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 250606973f55862c49a79b748e61dc3f5f0e7a455924224dd60fe0388c637f67
golang-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 1095fb19d52497dbdc4cd2fcc078d219ba7bc694aa620ba6b542ac31f816a0c6
golang-bin-1.24.6-1.el10_0.ppc64le.rpm SHA-256: 012256b3b70cbafd7d00f539e772649eb841b28b33d79c693b5c7801cd181d2c
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.ppc64le.rpm SHA-256: b0448b1a7b83c5a8dcca8c21e1fb5997d3c949d53a5b091b71a90745cb01b378
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
golang-1.24.6-1.el10_0.src.rpm SHA-256: 7f2c08550cd2e6d93bb022b54e32710e8a82f67bff8ef9d1332a1914ee842f0a
x86_64
go-toolset-1.24.6-1.el10_0.x86_64.rpm SHA-256: 18fe1545fc2e8d293cd0693173141b1de5737d0b0c3f57c80523335a48033cb9
golang-1.24.6-1.el10_0.x86_64.rpm SHA-256: 151ecd5a9d5b019ed9961e257af130515d7ecd4b2bd4273fa34a4413157fdd24
golang-bin-1.24.6-1.el10_0.x86_64.rpm SHA-256: 54100f1131b35b70a3a9b7f9ef1726993259adc2f29977a2f6a958a6c4361228
golang-docs-1.24.6-1.el10_0.noarch.rpm SHA-256: 2a17d386018041b0e6c74601570ae859ece7d107e073524afc6a5e6c6492d29f
golang-misc-1.24.6-1.el10_0.noarch.rpm SHA-256: 35418ce1e22702bce1744d40c54ed0a32b16259132cf149470bd4ca89f402757
golang-race-1.24.6-1.el10_0.x86_64.rpm SHA-256: ac49e88fd9ad42cde9caebbd2c45b0381a6c9ad509fea9c318f8ea878fe941b1
golang-src-1.24.6-1.el10_0.noarch.rpm SHA-256: ef18d7ae4f25772a00eea3e4ec1e76e720954da7e19f2dd0d687c870811169e3
golang-tests-1.24.6-1.el10_0.noarch.rpm SHA-256: 5a5e9e27fb25136aec552cda9ac8389ccb16f074624e2b59d9810bd9c7f152d5

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.