红帽产品勘误 RHSA-2026:3470 - Security Advisory
发布：
2026-03-02
已更新：
2026-03-02

RHSA-2026:3470 - Security Advisory

概述

Important: go-toolset:rhel8 security update

类型/严重性

Security Advisory: Important

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  • cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.4 x86_64

修复

  • BZ - 2434432 - CVE-2025-61726 golang: net/url: Memory exhaustion in query parameter parsing in net/url
  • BZ - 2437016 - CVE-2025-61732 cmd/cgo: Potential code smuggling via doc comments in cmd/cgo

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4

SRPM
delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src.rpm SHA-256: 82330956b947a41b6641b4a58b476507d2aadb0fb314fb775c2a12bb8786733d
go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src.rpm SHA-256: 60c380bd18f2ebad31ca78dcf75724e54134583a8b8d46d6d0867d167b39a70d
golang-1.15.14-20.module+el8.4.0+24035+02563ce1.src.rpm SHA-256: 8aca0316b343ebecd2ba951a0ef5e22f4342e9db11bb405cee323953cd964d2c
x86_64
delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: ea15304bd24355b219103aaf4c774ca82ec47b9def5f4bd2c38b125ad914fe8a
delve-debuginfo-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: 94e586cbd77e5cc8b98fda58a90d5ff365ddab1d155dd5f4e0ad4eac90e7ce1f
delve-debugsource-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: f654ab129b47aa437f717237ffc37c66a4716d81ac8575066939c76811eb0c6b
go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.x86_64.rpm SHA-256: 1ce3686ed1e446ef30b0d7ff75718b2098a04f1703f84d00086359ed90bb348e
golang-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: f8494baf101c3ee9aba860883933f4d0b3ed4039b6f047ef8112b1fbc9ddfe71
golang-bin-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: 578fc8365ed0c73a506d14994c7821c80c0809ab74aa66c7a3950e423a4821ae
golang-docs-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: 5dc2bf71c290b0dd0921945491b13b31a11abb6ae252603d1a18acebdf2713e7
golang-misc-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: c25a5be045e046af91c2223b61472be1edda3a5ef0ab8ec842e87b432a4253d9
golang-race-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: 993a85871a92d08e4125c9dacc604592f2c39426dd2317256f55634fbc824da0
golang-src-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: c2be79fa5b233edc93d98e1d6c82db4e7cfdba3edf22163b778d23253214e1a0
golang-tests-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: 881febffbeb1a9ecba5af2456212bcbf5b2421809ff87fe9bf7ccb764ad9bf1b

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src.rpm SHA-256: 82330956b947a41b6641b4a58b476507d2aadb0fb314fb775c2a12bb8786733d
go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src.rpm SHA-256: 60c380bd18f2ebad31ca78dcf75724e54134583a8b8d46d6d0867d167b39a70d
golang-1.15.14-20.module+el8.4.0+24035+02563ce1.src.rpm SHA-256: 8aca0316b343ebecd2ba951a0ef5e22f4342e9db11bb405cee323953cd964d2c
x86_64
delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: ea15304bd24355b219103aaf4c774ca82ec47b9def5f4bd2c38b125ad914fe8a
delve-debuginfo-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: 94e586cbd77e5cc8b98fda58a90d5ff365ddab1d155dd5f4e0ad4eac90e7ce1f
delve-debugsource-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64.rpm SHA-256: f654ab129b47aa437f717237ffc37c66a4716d81ac8575066939c76811eb0c6b
go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.x86_64.rpm SHA-256: 1ce3686ed1e446ef30b0d7ff75718b2098a04f1703f84d00086359ed90bb348e
golang-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: f8494baf101c3ee9aba860883933f4d0b3ed4039b6f047ef8112b1fbc9ddfe71
golang-bin-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: 578fc8365ed0c73a506d14994c7821c80c0809ab74aa66c7a3950e423a4821ae
golang-docs-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: 5dc2bf71c290b0dd0921945491b13b31a11abb6ae252603d1a18acebdf2713e7
golang-misc-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: c25a5be045e046af91c2223b61472be1edda3a5ef0ab8ec842e87b432a4253d9
golang-race-1.15.14-20.module+el8.4.0+24035+02563ce1.x86_64.rpm SHA-256: 993a85871a92d08e4125c9dacc604592f2c39426dd2317256f55634fbc824da0
golang-src-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: c2be79fa5b233edc93d98e1d6c82db4e7cfdba3edf22163b778d23253214e1a0
golang-tests-1.15.14-20.module+el8.4.0+24035+02563ce1.noarch.rpm SHA-256: 881febffbeb1a9ecba5af2456212bcbf5b2421809ff87fe9bf7ccb764ad9bf1b

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。