Medium ELSA-2025-10672 1 CVE

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

Published Jul 15, 2025 · Updated Jul 15, 2025

Ecosystem: Oracle Linux

Summary

delve
[1.24.1-1.0.1]
- Disable DWARF compression which has issues (Alex Burmashev)

golang
[1.24.4-1]
- Update to Go 1.24.4 (fips-1)
- Resolves: RHEL-85264

go-toolset
[1.24.4-1]
- Update to Go 1.24.4 (fips-1)
- Resolves: RHEL-85264

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	delve	0:1.24.1-1.0.1.module+el8.10.0+90602+3daf471e
Oracle Linux · 8	go-toolset	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang-bin	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang-docs	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang-misc	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang-src	0:1.24.4-1.module+el8.10.0+90631+36e43025
Oracle Linux · 8	golang-tests	0:1.24.4-1.module+el8.10.0+90631+36e43025

Vulnerabilities 1

Medium 6.8

CVE-2025-4673

Sensitive headers not cleared on cross-origin redirect in net/http

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Jun 11, 2025