go-rpm-macros-3.6.0-12.el9_7

エラータID: AXSA:2025-11118:03

Release date: 
Thursday, November 27, 2025 - 22:59
Subject: 
go-rpm-macros-3.6.0-12.el9_7
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only.

Security Fix(es):

* os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-47906
If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. go-rpm-macros-3.6.0-12.el9_7.src.rpm
    MD5: b9e96fc44deed792bd7dfc6d82ef70bf
    SHA-256: 38036bb6606d228788ce1c27f04a13b6229f7125c810b31f7e917a87f2c7a1b2
    Size: 131.10 kB

Asianux Server 9 for x86_64
  1. go-filesystem-3.6.0-12.el9_7.x86_64.rpm
    MD5: 0359e711e230e7884d9aa0f720478047
    SHA-256: 2f174cfaaef8d38a0d6daa3909a105ac85e4d282154574eed8189d510a70f5f2
    Size: 8.12 kB
  2. go-rpm-macros-3.6.0-12.el9_7.x86_64.rpm
    MD5: 820f2589706021aa3895b5b4139572e2
    SHA-256: c6ac6334e7078ed26d07395c5bef0f473ee65068198e365a12581b0eb96ca641
    Size: 1.67 MB
  3. go-rpm-templates-3.6.0-12.el9_7.noarch.rpm
    MD5: a82580961952abce9cad97122c8f4c78
    SHA-256: e5ec6a4f5d54b13682d0ab67af26fec602821a7215b4f25f9b1893e0ea69d083
    Size: 24.38 kB
  4. go-srpm-macros-3.6.0-12.el9_7.noarch.rpm
    MD5: 304188bc0b13025dd5feeaa4f16120d1
    SHA-256: 113128f3573259ff8437f279a3986aa2ce5727347ddfb603c1572e6bbc719c18
    Size: 26.68 kB