FlawAtlas
Search the atlas
ALSA-2021:5160 Not scored

Important: go-toolset:rhel8 security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716) * golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Rebase Go to 1.16.12 (BZ#2031125)

Exploit probability Not scored
Published December 15, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

AlmaLinux:8 delve
AlmaLinux:8 go-toolset
AlmaLinux:8 golang
AlmaLinux:8 golang-bin
AlmaLinux:8 golang-docs
AlmaLinux:8 golang-misc
AlmaLinux:8 golang-race
AlmaLinux:8 golang-src
AlmaLinux:8 golang-tests

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities ALSA-2021:5160

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716) * golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Rebase Go to 1.16.12 (BZ#2031125)

View original source

05 / REFERENCES

Further evidence