红帽产品勘误 RHSA-2026:3473 - Security Advisory
发布：
2026-03-02
已更新：
2026-03-02

RHSA-2026:3473 - Security Advisory

概述

Important: golang security update

类型/严重性

Security Advisory: Important

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for golang is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  • golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  • cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

修复

  • BZ - 2434431 - CVE-2025-61728 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip
  • BZ - 2434432 - CVE-2025-61726 golang: net/url: Memory exhaustion in query parameter parsing in net/url
  • BZ - 2437016 - CVE-2025-61732 cmd/cgo: Potential code smuggling via doc comments in cmd/cgo

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM
golang-1.17.13-10.el9_0.src.rpm SHA-256: ea80f0d7773c603ec932fa6158bf79123e7caf7475430ec6ab120e694f13e24f
ppc64le
golang-1.17.13-10.el9_0.ppc64le.rpm SHA-256: 1bbbe6e103908bc55b4aefa4aa920b576a5cbd393004fdffd8987f5dc2d91934
golang-bin-1.17.13-10.el9_0.ppc64le.rpm SHA-256: 7a6cd06e1a147c482cd92cf05e86e97c3664593173a2f70a27f230b459bef5df
golang-docs-1.17.13-10.el9_0.noarch.rpm SHA-256: d544c29745683471df10a4822adbcae8283fbae3dfd3b203b2c862552f91f56c
golang-misc-1.17.13-10.el9_0.noarch.rpm SHA-256: dc9cef76ec7ef8c0796fc2be6a0ffebf729c11cf3710dff6ced568c7d840b8ca
golang-src-1.17.13-10.el9_0.noarch.rpm SHA-256: 169d994a5be6357994e98b5a7e0ef46d9005fba6057ab97f02c2c0d7ed811d54
golang-tests-1.17.13-10.el9_0.noarch.rpm SHA-256: 16c83dedf02d6ee3615730cbf3038f2768164b0d39dbb4200bc2bef725270eee

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM
golang-1.17.13-10.el9_0.src.rpm SHA-256: ea80f0d7773c603ec932fa6158bf79123e7caf7475430ec6ab120e694f13e24f
x86_64
golang-1.17.13-10.el9_0.x86_64.rpm SHA-256: 495dbfbddb04b177395ac4fa8e64513ed7bb5e17676361304456aa00bbc4e7c0
golang-bin-1.17.13-10.el9_0.x86_64.rpm SHA-256: aac1f0cc29a2bc95a3569b65150e201b3879307c791cefd6eccd3cc38a17ecb3
golang-docs-1.17.13-10.el9_0.noarch.rpm SHA-256: d544c29745683471df10a4822adbcae8283fbae3dfd3b203b2c862552f91f56c
golang-misc-1.17.13-10.el9_0.noarch.rpm SHA-256: dc9cef76ec7ef8c0796fc2be6a0ffebf729c11cf3710dff6ced568c7d840b8ca
golang-race-1.17.13-10.el9_0.x86_64.rpm SHA-256: 64693b174b910c527e1a30ba122151c3fdda14d27161eebf384ed1c68d374edb
golang-src-1.17.13-10.el9_0.noarch.rpm SHA-256: 169d994a5be6357994e98b5a7e0ef46d9005fba6057ab97f02c2c0d7ed811d54
golang-tests-1.17.13-10.el9_0.noarch.rpm SHA-256: 16c83dedf02d6ee3615730cbf3038f2768164b0d39dbb4200bc2bef725270eee

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0

SRPM
golang-1.17.13-10.el9_0.src.rpm SHA-256: ea80f0d7773c603ec932fa6158bf79123e7caf7475430ec6ab120e694f13e24f
aarch64
golang-1.17.13-10.el9_0.aarch64.rpm SHA-256: c1342f3c860c225c20f99d03a24fdb57a75911d233249ad75a374e807f36e9e3
golang-bin-1.17.13-10.el9_0.aarch64.rpm SHA-256: 689dbca069d10b8f40576443744ee4c2729a14b87e381495755d55f5c00be1aa
golang-docs-1.17.13-10.el9_0.noarch.rpm SHA-256: d544c29745683471df10a4822adbcae8283fbae3dfd3b203b2c862552f91f56c
golang-misc-1.17.13-10.el9_0.noarch.rpm SHA-256: dc9cef76ec7ef8c0796fc2be6a0ffebf729c11cf3710dff6ced568c7d840b8ca
golang-src-1.17.13-10.el9_0.noarch.rpm SHA-256: 169d994a5be6357994e98b5a7e0ef46d9005fba6057ab97f02c2c0d7ed811d54
golang-tests-1.17.13-10.el9_0.noarch.rpm SHA-256: 16c83dedf02d6ee3615730cbf3038f2768164b0d39dbb4200bc2bef725270eee

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0

SRPM
golang-1.17.13-10.el9_0.src.rpm SHA-256: ea80f0d7773c603ec932fa6158bf79123e7caf7475430ec6ab120e694f13e24f
s390x
golang-1.17.13-10.el9_0.s390x.rpm SHA-256: 296e79a19bd7e5573a11357229d1777ecaa56b6eb68135385f1c67cf685c8a7a
golang-bin-1.17.13-10.el9_0.s390x.rpm SHA-256: 6499aedae27e61cc90316f154c0b6de80bca63efc59df612b8e52b0ffdab3752
golang-docs-1.17.13-10.el9_0.noarch.rpm SHA-256: d544c29745683471df10a4822adbcae8283fbae3dfd3b203b2c862552f91f56c
golang-misc-1.17.13-10.el9_0.noarch.rpm SHA-256: dc9cef76ec7ef8c0796fc2be6a0ffebf729c11cf3710dff6ced568c7d840b8ca
golang-src-1.17.13-10.el9_0.noarch.rpm SHA-256: 169d994a5be6357994e98b5a7e0ef46d9005fba6057ab97f02c2c0d7ed811d54
golang-tests-1.17.13-10.el9_0.noarch.rpm SHA-256: 16c83dedf02d6ee3615730cbf3038f2768164b0d39dbb4200bc2bef725270eee

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。