Red Hat Product Errata RHSA-2025:22004 - Security Advisory
Issued:
2025-11-25
Updated:
2025-11-25

RHSA-2025:22004 - Security Advisory

Synopsis

Moderate: go-rpm-macros security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for go-rpm-macros is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only.

Security Fix(es):

  • os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2396546 - CVE-2025-47906 os/exec: Unexpected paths returned from LookPath in os/exec

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
x86_64
go-filesystem-3.6.0-11.el9_6.x86_64.rpm SHA-256: 4cf1e8a565b910cd035f4d6e83e1a20f6a6ae0ebbc1c47fca3fb70b18279ba17
go-rpm-macros-3.6.0-11.el9_6.x86_64.rpm SHA-256: a435a539018fccab1ea800b24512b02cf5d0bcbaefea4745b14e61b5ec617a52
go-rpm-macros-debuginfo-3.6.0-11.el9_6.x86_64.rpm SHA-256: dba3c77d4f67e2f6b61f0fb8eda7bc84f8bbc5df83c3d101f023581d90ef3e9c
go-rpm-macros-debugsource-3.6.0-11.el9_6.x86_64.rpm SHA-256: 747b9f801f67f0a9a09d94d155773fed5caa3057f7d06fab127630ae45219a20
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
x86_64
go-filesystem-3.6.0-11.el9_6.x86_64.rpm SHA-256: 4cf1e8a565b910cd035f4d6e83e1a20f6a6ae0ebbc1c47fca3fb70b18279ba17
go-rpm-macros-3.6.0-11.el9_6.x86_64.rpm SHA-256: a435a539018fccab1ea800b24512b02cf5d0bcbaefea4745b14e61b5ec617a52
go-rpm-macros-debuginfo-3.6.0-11.el9_6.x86_64.rpm SHA-256: dba3c77d4f67e2f6b61f0fb8eda7bc84f8bbc5df83c3d101f023581d90ef3e9c
go-rpm-macros-debugsource-3.6.0-11.el9_6.x86_64.rpm SHA-256: 747b9f801f67f0a9a09d94d155773fed5caa3057f7d06fab127630ae45219a20
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
s390x
go-filesystem-3.6.0-11.el9_6.s390x.rpm SHA-256: 07572373a624143f3b6e0ed97fa3c8bfe5ce296f869fddde331b51d624d4a653
go-rpm-macros-3.6.0-11.el9_6.s390x.rpm SHA-256: 74a89786301bb5e44c85d360164d64e5beeed5486433908bfe270905e1fd868e
go-rpm-macros-debuginfo-3.6.0-11.el9_6.s390x.rpm SHA-256: 735af2a5cb1bb1292cff962cd01a3fde1dd5a6bba4e32b5ea841e4457a442694
go-rpm-macros-debugsource-3.6.0-11.el9_6.s390x.rpm SHA-256: ac83f57575e56d00a49f4aacfdaa14a74444425a29e5413c7a0f409a5a79ec82
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
ppc64le
go-filesystem-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 5d441c76bb3d9cadf2891434370ec06d312d2dfb4530b044f3e795c6070e14cc
go-rpm-macros-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 10ff53f02db3703a6b789e8bdf1a054ad8f7c0be09dfb4ac52ee5225f26b3291
go-rpm-macros-debuginfo-3.6.0-11.el9_6.ppc64le.rpm SHA-256: b04fee8e9f2e93910f36ed875990349c1723a6828a541a10bbeb5865f28835a5
go-rpm-macros-debugsource-3.6.0-11.el9_6.ppc64le.rpm SHA-256: bd690202578aae99330929695d5e5bba08743efbe5bdd184abb2de15e183eed7
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
aarch64
go-filesystem-3.6.0-11.el9_6.aarch64.rpm SHA-256: 05b427bc2ce1d380c25103ce3a40ffa4821b992323abad1c798c76f929b2ff19
go-rpm-macros-3.6.0-11.el9_6.aarch64.rpm SHA-256: 9f709c13936877536663d5020d8b2372f03d7530beb2de1c8b1f1e87b045b837
go-rpm-macros-debuginfo-3.6.0-11.el9_6.aarch64.rpm SHA-256: e7f34f7b19019ebb5851512b03b05ed977b7c607a812fd12ba273ee81d15a806
go-rpm-macros-debugsource-3.6.0-11.el9_6.aarch64.rpm SHA-256: 73ad0e4ca8a322e15f84e05ca3ca9533f140ec372ed5fbf0117d01f2688f79db
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
ppc64le
go-filesystem-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 5d441c76bb3d9cadf2891434370ec06d312d2dfb4530b044f3e795c6070e14cc
go-rpm-macros-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 10ff53f02db3703a6b789e8bdf1a054ad8f7c0be09dfb4ac52ee5225f26b3291
go-rpm-macros-debuginfo-3.6.0-11.el9_6.ppc64le.rpm SHA-256: b04fee8e9f2e93910f36ed875990349c1723a6828a541a10bbeb5865f28835a5
go-rpm-macros-debugsource-3.6.0-11.el9_6.ppc64le.rpm SHA-256: bd690202578aae99330929695d5e5bba08743efbe5bdd184abb2de15e183eed7
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
x86_64
go-filesystem-3.6.0-11.el9_6.x86_64.rpm SHA-256: 4cf1e8a565b910cd035f4d6e83e1a20f6a6ae0ebbc1c47fca3fb70b18279ba17
go-rpm-macros-3.6.0-11.el9_6.x86_64.rpm SHA-256: a435a539018fccab1ea800b24512b02cf5d0bcbaefea4745b14e61b5ec617a52
go-rpm-macros-debuginfo-3.6.0-11.el9_6.x86_64.rpm SHA-256: dba3c77d4f67e2f6b61f0fb8eda7bc84f8bbc5df83c3d101f023581d90ef3e9c
go-rpm-macros-debugsource-3.6.0-11.el9_6.x86_64.rpm SHA-256: 747b9f801f67f0a9a09d94d155773fed5caa3057f7d06fab127630ae45219a20
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
aarch64
go-filesystem-3.6.0-11.el9_6.aarch64.rpm SHA-256: 05b427bc2ce1d380c25103ce3a40ffa4821b992323abad1c798c76f929b2ff19
go-rpm-macros-3.6.0-11.el9_6.aarch64.rpm SHA-256: 9f709c13936877536663d5020d8b2372f03d7530beb2de1c8b1f1e87b045b837
go-rpm-macros-debuginfo-3.6.0-11.el9_6.aarch64.rpm SHA-256: e7f34f7b19019ebb5851512b03b05ed977b7c607a812fd12ba273ee81d15a806
go-rpm-macros-debugsource-3.6.0-11.el9_6.aarch64.rpm SHA-256: 73ad0e4ca8a322e15f84e05ca3ca9533f140ec372ed5fbf0117d01f2688f79db
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
s390x
go-filesystem-3.6.0-11.el9_6.s390x.rpm SHA-256: 07572373a624143f3b6e0ed97fa3c8bfe5ce296f869fddde331b51d624d4a653
go-rpm-macros-3.6.0-11.el9_6.s390x.rpm SHA-256: 74a89786301bb5e44c85d360164d64e5beeed5486433908bfe270905e1fd868e
go-rpm-macros-debuginfo-3.6.0-11.el9_6.s390x.rpm SHA-256: 735af2a5cb1bb1292cff962cd01a3fde1dd5a6bba4e32b5ea841e4457a442694
go-rpm-macros-debugsource-3.6.0-11.el9_6.s390x.rpm SHA-256: ac83f57575e56d00a49f4aacfdaa14a74444425a29e5413c7a0f409a5a79ec82
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
x86_64
go-filesystem-3.6.0-11.el9_6.x86_64.rpm SHA-256: 4cf1e8a565b910cd035f4d6e83e1a20f6a6ae0ebbc1c47fca3fb70b18279ba17
go-rpm-macros-3.6.0-11.el9_6.x86_64.rpm SHA-256: a435a539018fccab1ea800b24512b02cf5d0bcbaefea4745b14e61b5ec617a52
go-rpm-macros-debuginfo-3.6.0-11.el9_6.x86_64.rpm SHA-256: dba3c77d4f67e2f6b61f0fb8eda7bc84f8bbc5df83c3d101f023581d90ef3e9c
go-rpm-macros-debugsource-3.6.0-11.el9_6.x86_64.rpm SHA-256: 747b9f801f67f0a9a09d94d155773fed5caa3057f7d06fab127630ae45219a20
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
aarch64
go-filesystem-3.6.0-11.el9_6.aarch64.rpm SHA-256: 05b427bc2ce1d380c25103ce3a40ffa4821b992323abad1c798c76f929b2ff19
go-rpm-macros-3.6.0-11.el9_6.aarch64.rpm SHA-256: 9f709c13936877536663d5020d8b2372f03d7530beb2de1c8b1f1e87b045b837
go-rpm-macros-debuginfo-3.6.0-11.el9_6.aarch64.rpm SHA-256: e7f34f7b19019ebb5851512b03b05ed977b7c607a812fd12ba273ee81d15a806
go-rpm-macros-debugsource-3.6.0-11.el9_6.aarch64.rpm SHA-256: 73ad0e4ca8a322e15f84e05ca3ca9533f140ec372ed5fbf0117d01f2688f79db
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
ppc64le
go-filesystem-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 5d441c76bb3d9cadf2891434370ec06d312d2dfb4530b044f3e795c6070e14cc
go-rpm-macros-3.6.0-11.el9_6.ppc64le.rpm SHA-256: 10ff53f02db3703a6b789e8bdf1a054ad8f7c0be09dfb4ac52ee5225f26b3291
go-rpm-macros-debuginfo-3.6.0-11.el9_6.ppc64le.rpm SHA-256: b04fee8e9f2e93910f36ed875990349c1723a6828a541a10bbeb5865f28835a5
go-rpm-macros-debugsource-3.6.0-11.el9_6.ppc64le.rpm SHA-256: bd690202578aae99330929695d5e5bba08743efbe5bdd184abb2de15e183eed7
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
go-rpm-macros-3.6.0-11.el9_6.src.rpm SHA-256: bda7d55c478eede1f7c631b0d26cc620a388f8f6086c715e556c6ca51d09f956
s390x
go-filesystem-3.6.0-11.el9_6.s390x.rpm SHA-256: 07572373a624143f3b6e0ed97fa3c8bfe5ce296f869fddde331b51d624d4a653
go-rpm-macros-3.6.0-11.el9_6.s390x.rpm SHA-256: 74a89786301bb5e44c85d360164d64e5beeed5486433908bfe270905e1fd868e
go-rpm-macros-debuginfo-3.6.0-11.el9_6.s390x.rpm SHA-256: 735af2a5cb1bb1292cff962cd01a3fde1dd5a6bba4e32b5ea841e4457a442694
go-rpm-macros-debugsource-3.6.0-11.el9_6.s390x.rpm SHA-256: ac83f57575e56d00a49f4aacfdaa14a74444425a29e5413c7a0f409a5a79ec82
go-rpm-templates-3.6.0-11.el9_6.noarch.rpm SHA-256: 253446d2113fac567a452330ddcc9db122e41344aa768c3ee33828b4200373ed
go-srpm-macros-3.6.0-11.el9_6.noarch.rpm SHA-256: a165e0f97325918ca026fb0b415136967c38ae80326e960cd322f71e93c49a08

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.