Red Hat Product Errata RHSA-2025:9319 - Security Advisory
Issued:
2025-06-23
Updated:
2025-06-23

RHSA-2025:9319 - Security Advisory

Synopsis

Moderate: go-toolset:rhel8 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2358493 - CVE-2025-22871 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
delve-1.3.2-3.module+el8.2.0+5581+896cb53e.src.rpm SHA-256: 61998a0b9b9cb0240fbd0ea9048c1c8be5cce3848ba7e057fdacd351398b4957
go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.src.rpm SHA-256: 91ee586b3443d0d786f4b894c45c18c0f287d0447c9e0a3a2b64a69292564179
golang-1.13.15-10.module+el8.2.0+23279+c91dba29.src.rpm SHA-256: 77440fbf1aa216b50eb9b5dbd8e924d0007d7dbe67fb5c46ea2d620487191fbd
x86_64
delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: b0709ae53731835043e0eab5157240aaefb2536ff3fb020501e6b0f688890279
delve-debuginfo-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: 51e2818ff6ed3b0513f1f1e1c99eaa89608445b0250274c6c2b5556f9a73a699
delve-debugsource-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: e948d3a2dd0f5154872b401e74629365fa6a482f13ef103578a13078a2136bff
go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.x86_64.rpm SHA-256: 008476b28d4c5cf1683b9206940852d669a53be1022ac61f8dcfb1dc00b2af3f
golang-1.13.15-10.module+el8.2.0+23279+c91dba29.x86_64.rpm SHA-256: 3e4e8745ff618aa28e851e66a2967ccca7f392c3d0ff1e7938ae78adb4333271
golang-bin-1.13.15-10.module+el8.2.0+23279+c91dba29.x86_64.rpm SHA-256: 5a9f836f979acca9f99ab4b64d395d712e24409b81eb35b1b951dcaf67867aa0
golang-docs-1.13.15-10.module+el8.2.0+23279+c91dba29.noarch.rpm SHA-256: 0386a68566aeadade0ec1de46b8861ee5225bc792a950bcd6062e2d0aa9e1b5d
golang-misc-1.13.15-10.module+el8.2.0+23279+c91dba29.noarch.rpm SHA-256: 260a574df4bea08263798d9256a8c514bffd53e3483b30f35affeae7f6e07606
golang-race-1.13.15-10.module+el8.2.0+23279+c91dba29.x86_64.rpm SHA-256: 4be487ed2d9a379bb3ee4df748fd38bdeb134b950c5efcc0337cce8ae24511c2
golang-src-1.13.15-10.module+el8.2.0+23279+c91dba29.noarch.rpm SHA-256: ea1180160cc5387cbbbb9325076069e9ce211e4b6d77e74fa8ae3ad54a3ec335
golang-tests-1.13.15-10.module+el8.2.0+23279+c91dba29.noarch.rpm SHA-256: 2178f8c35d13d62e3f370786aa5dbc53427ecefc66b24bbb2b7182a6a78ec892

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.