Skip to content
OpenAdvisories
Unscored RHSA-2017:3463 2 CVEs

Red Hat Security Advisory: go-toolset-7 and go-toolset-7-golang security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7 0:1.8-10.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-build 0:1.8-10.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-dockerfiles 0:1.8-10.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-bin 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-docs 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-misc 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-race 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-src 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-golang-tests 0:1.8.5-1.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-runtime 0:1.8-10.el7
Red Hat · Devtools 2 devtools:2::el7 go-toolset-7-scldevel 0:1.8-10.el7

Vulnerabilities 2

  • Unscored —
    CVE-2017-15041

    Remote command execution via "go get" in cmd/go

    Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Sub…

    golang-1.8 golang-1.6 toolchain Ubuntu Go
  • Unscored —
    CVE-2017-15042

    Cleartext transmission of credentials in net/smtp

    An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enfor…

    golang stdlib golang-1.8 golang-1.6 Ubuntu Azure Linux Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1498867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1498870
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3463.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-15041
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15041
  • report
    https://access.redhat.com/security/cve/CVE-2017-15042
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15042
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15042