Red Hat Product Errata RHSA-2025:9069 - Security Advisory
Issued:
2025-06-16
Updated:
2025-06-16

RHSA-2025:9069 - Security Advisory

Synopsis

Moderate: go-toolset:rhel8 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 2358493 - CVE-2025-22871 net/http: Request smuggling due to acceptance of invalid chunked data in net/http
  • RHEL-79868 - Latest rhel-8.6.0.z go-toolset-rhel8-8060020250210132423.97d7f71f includes golang with wrong release number

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src.rpm SHA-256: 44a2b887ac7cf70aa7da01bd7270317ac78835f57e3a77db1dda2535221b13c8
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src.rpm SHA-256: 0643299fe9ddf3bccb165f1602524fb9949c078b70115c1ec44f7e0d8563361f
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.src.rpm SHA-256: ef87fb3d74ad2f3b20bcaff6271010952967668b0f6c399258fc6e661e7c063a
x86_64
golang-docs-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 2d96cfb12b6189fbbddb43a01a03ad61ade965c5cfb82bff0b81e8224b2ff3f2
golang-misc-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 44f11ce5c704fc6ef16ac4ed564348e9d3a41cf8f6f74a977491db942eec61e9
golang-src-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 39c88b0ddb1ea09e51ea58da483f82d8429e2b0f277bafae8ee22bd4f6c1f3f9
golang-tests-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 8ee54d35485326c947f9df8ec5e2a4e09c217fac0b10c4db446e341f7c78872e
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 9598cc44ff03619d1c15be6370aa26c160322efb2f0fd77935ba9a6a428c7336
delve-debuginfo-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: db670a378a6084e9f720e134d92e37d1d8352da9890cb3e18c07099bdbd5f9bd
delve-debugsource-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 8cf6beaea1fdadc76021cd8c96d25cbfc1c49c8771b09dd995be3b63e7654d95
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.x86_64.rpm SHA-256: 973ca59a4f81389e20f25f0e486eb188366d4581e23c3c6d51b440984e084af3
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: af9052a8e783e78052a3357890e17bf3af341df5a5de5d9bc58a7c22ba7674da
golang-bin-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: f83297e61f8e149e946d3a3b4c5efd52ef3e404180fef490f4cfb508c612c21f
golang-race-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: 3cb7f10eb3d07e56982514a855e3a5d01f330da099611f098e40305dfd79109b

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src.rpm SHA-256: 44a2b887ac7cf70aa7da01bd7270317ac78835f57e3a77db1dda2535221b13c8
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src.rpm SHA-256: 0643299fe9ddf3bccb165f1602524fb9949c078b70115c1ec44f7e0d8563361f
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.src.rpm SHA-256: ef87fb3d74ad2f3b20bcaff6271010952967668b0f6c399258fc6e661e7c063a
x86_64
golang-docs-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 2d96cfb12b6189fbbddb43a01a03ad61ade965c5cfb82bff0b81e8224b2ff3f2
golang-misc-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 44f11ce5c704fc6ef16ac4ed564348e9d3a41cf8f6f74a977491db942eec61e9
golang-src-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 39c88b0ddb1ea09e51ea58da483f82d8429e2b0f277bafae8ee22bd4f6c1f3f9
golang-tests-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 8ee54d35485326c947f9df8ec5e2a4e09c217fac0b10c4db446e341f7c78872e
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 9598cc44ff03619d1c15be6370aa26c160322efb2f0fd77935ba9a6a428c7336
delve-debuginfo-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: db670a378a6084e9f720e134d92e37d1d8352da9890cb3e18c07099bdbd5f9bd
delve-debugsource-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 8cf6beaea1fdadc76021cd8c96d25cbfc1c49c8771b09dd995be3b63e7654d95
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.x86_64.rpm SHA-256: 973ca59a4f81389e20f25f0e486eb188366d4581e23c3c6d51b440984e084af3
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: af9052a8e783e78052a3357890e17bf3af341df5a5de5d9bc58a7c22ba7674da
golang-bin-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: f83297e61f8e149e946d3a3b4c5efd52ef3e404180fef490f4cfb508c612c21f
golang-race-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: 3cb7f10eb3d07e56982514a855e3a5d01f330da099611f098e40305dfd79109b

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src.rpm SHA-256: 44a2b887ac7cf70aa7da01bd7270317ac78835f57e3a77db1dda2535221b13c8
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src.rpm SHA-256: 0643299fe9ddf3bccb165f1602524fb9949c078b70115c1ec44f7e0d8563361f
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.src.rpm SHA-256: ef87fb3d74ad2f3b20bcaff6271010952967668b0f6c399258fc6e661e7c063a
x86_64
golang-docs-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 2d96cfb12b6189fbbddb43a01a03ad61ade965c5cfb82bff0b81e8224b2ff3f2
golang-misc-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 44f11ce5c704fc6ef16ac4ed564348e9d3a41cf8f6f74a977491db942eec61e9
golang-src-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 39c88b0ddb1ea09e51ea58da483f82d8429e2b0f277bafae8ee22bd4f6c1f3f9
golang-tests-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 8ee54d35485326c947f9df8ec5e2a4e09c217fac0b10c4db446e341f7c78872e
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 9598cc44ff03619d1c15be6370aa26c160322efb2f0fd77935ba9a6a428c7336
delve-debuginfo-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: db670a378a6084e9f720e134d92e37d1d8352da9890cb3e18c07099bdbd5f9bd
delve-debugsource-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 8cf6beaea1fdadc76021cd8c96d25cbfc1c49c8771b09dd995be3b63e7654d95
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.x86_64.rpm SHA-256: 973ca59a4f81389e20f25f0e486eb188366d4581e23c3c6d51b440984e084af3
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: af9052a8e783e78052a3357890e17bf3af341df5a5de5d9bc58a7c22ba7674da
golang-bin-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: f83297e61f8e149e946d3a3b4c5efd52ef3e404180fef490f4cfb508c612c21f
golang-race-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: 3cb7f10eb3d07e56982514a855e3a5d01f330da099611f098e40305dfd79109b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src.rpm SHA-256: 0643299fe9ddf3bccb165f1602524fb9949c078b70115c1ec44f7e0d8563361f
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.src.rpm SHA-256: ef87fb3d74ad2f3b20bcaff6271010952967668b0f6c399258fc6e661e7c063a
ppc64le
golang-docs-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 2d96cfb12b6189fbbddb43a01a03ad61ade965c5cfb82bff0b81e8224b2ff3f2
golang-misc-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 44f11ce5c704fc6ef16ac4ed564348e9d3a41cf8f6f74a977491db942eec61e9
golang-src-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 39c88b0ddb1ea09e51ea58da483f82d8429e2b0f277bafae8ee22bd4f6c1f3f9
golang-tests-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 8ee54d35485326c947f9df8ec5e2a4e09c217fac0b10c4db446e341f7c78872e
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.ppc64le.rpm SHA-256: 2fed95699871ae5cc933c2ad65651b51d4a47d99ed40165a62f03e2c83f6c565
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.ppc64le.rpm SHA-256: 39e7da228224ed7e7963543cd7fa6cc1dfe4115b40a44b5c37215c5650fd2639
golang-bin-1.17.13-9.module+el8.6.0+23245+b36ba85c.ppc64le.rpm SHA-256: d20249388e09fc1bce72c863acd5ebbf74aef0c9e661ac529c6563ce22c2352a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src.rpm SHA-256: 44a2b887ac7cf70aa7da01bd7270317ac78835f57e3a77db1dda2535221b13c8
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src.rpm SHA-256: 0643299fe9ddf3bccb165f1602524fb9949c078b70115c1ec44f7e0d8563361f
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.src.rpm SHA-256: ef87fb3d74ad2f3b20bcaff6271010952967668b0f6c399258fc6e661e7c063a
x86_64
golang-docs-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 2d96cfb12b6189fbbddb43a01a03ad61ade965c5cfb82bff0b81e8224b2ff3f2
golang-misc-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 44f11ce5c704fc6ef16ac4ed564348e9d3a41cf8f6f74a977491db942eec61e9
golang-src-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 39c88b0ddb1ea09e51ea58da483f82d8429e2b0f277bafae8ee22bd4f6c1f3f9
golang-tests-1.17.13-9.module+el8.6.0+23245+b36ba85c.noarch.rpm SHA-256: 8ee54d35485326c947f9df8ec5e2a4e09c217fac0b10c4db446e341f7c78872e
delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 9598cc44ff03619d1c15be6370aa26c160322efb2f0fd77935ba9a6a428c7336
delve-debuginfo-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: db670a378a6084e9f720e134d92e37d1d8352da9890cb3e18c07099bdbd5f9bd
delve-debugsource-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm SHA-256: 8cf6beaea1fdadc76021cd8c96d25cbfc1c49c8771b09dd995be3b63e7654d95
go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.x86_64.rpm SHA-256: 973ca59a4f81389e20f25f0e486eb188366d4581e23c3c6d51b440984e084af3
golang-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: af9052a8e783e78052a3357890e17bf3af341df5a5de5d9bc58a7c22ba7674da
golang-bin-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: f83297e61f8e149e946d3a3b4c5efd52ef3e404180fef490f4cfb508c612c21f
golang-race-1.17.13-9.module+el8.6.0+23245+b36ba85c.x86_64.rpm SHA-256: 3cb7f10eb3d07e56982514a855e3a5d01f330da099611f098e40305dfd79109b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.