[security - high] go-toolset:rhel8 security update

エラータID: AXSA:2025-10761:01

リリース日: 
2025/08/20 Wednesday - 15:12
題名: 
[security - high] go-toolset:rhel8 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

* cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-4674
The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS (e.g. Git), but contains metadata for another VCS (e.g. Mercurial). Modules which are retrieved using the go command line, i.e. via "go get", are not affected.

Modularity name: "go-toolset"
Stream name: "rhel8"

解決策: 

Update packages.

CVE: 
CVE-2025-4674
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. delve-1.24.1-1.module+el8+1896+f3ff94df.ML.1.src.rpm
    MD5: 485d4dce6e6c506b61039233fd6f4872
    SHA-256: 759e2a84877b8578cbea35bba7b92354093edf45d4e001ba8b5b1516725e52cc
    Size: 9.17 MB
  2. golang-1.24.6-1.module+el8+1896+f3ff94df.ML.1.src.rpm
    MD5: 236b61955d3adf120cad0e51a2d0e3ae
    SHA-256: f340681a169c4f76bcd2220fba57f18c4ab4930a2653971c4b69dc72ab503eb3
    Size: 29.30 MB
  3. go-toolset-1.24.6-1.module+el8+1896+f3ff94df.src.rpm
    MD5: b5e4364589b5a38f93885ed14aba1104
    SHA-256: 860cf69dfaaa15e091bb982f3c8474f013ab46bc3d569d49101a5424a759336e
    Size: 16.78 kB

Asianux Server 8 for x86_64
  1. delve-1.24.1-1.module+el8+1896+f3ff94df.ML.1.x86_64.rpm
    MD5: 1d8fb12f66eac2e606af2e478c36abee
    SHA-256: e8055786aeaa39db96326dbfa667e6fbddecca0549804b8d7675af2c6727aab6
    Size: 5.47 MB
  2. delve-debugsource-1.24.1-1.module+el8+1896+f3ff94df.ML.1.x86_64.rpm
    MD5: 8c2a7584d7ed5ffe45a016e26da4fdf1
    SHA-256: 42c333a7f7b649795e14fb406cf4c39a1d0e41d83cc27bf713bef3fda791a7c7
    Size: 1.27 MB
  3. golang-1.24.6-1.module+el8+1896+f3ff94df.ML.1.x86_64.rpm
    MD5: 8c5580920a06221672aecda4d3519f92
    SHA-256: 9943c4a36e5ed0c9f7f8d62b4cebaf1529870007b94d2c53a0a2f7cae8cbc87d
    Size: 1.33 MB
  4. golang-bin-1.24.6-1.module+el8+1896+f3ff94df.ML.1.x86_64.rpm
    MD5: 7ce8c679a917c250c8d3defadf68dca5
    SHA-256: aee5e057fc313c2df27b2145fe60a98eafa99a25529da3f0e96e1d184aad97ff
    Size: 76.68 MB
  5. golang-docs-1.24.6-1.module+el8+1896+f3ff94df.ML.1.noarch.rpm
    MD5: 3bf353bd0fcc2124dee6bd84df1d5cd8
    SHA-256: d213c9e4988587b344ab1c38fd59029bf55cb5c40f023ad0ba90069e309814ab
    Size: 139.37 kB
  6. golang-misc-1.24.6-1.module+el8+1896+f3ff94df.ML.1.noarch.rpm
    MD5: 4f7d93c8ac548e6673fb4495123436b8
    SHA-256: cebbc1f71a4ab0e31a6dfda22139ee5d943ef4565aa5cd3a53c9163f1be89189
    Size: 60.69 kB
  7. golang-src-1.24.6-1.module+el8+1896+f3ff94df.ML.1.noarch.rpm
    MD5: ba6cc48ac3e398345d27333bd47b9443
    SHA-256: 3f3ffc50081e84d7f302784b5d0140ef456161e1757b3de82e3a5ea6222da748
    Size: 12.45 MB
  8. golang-tests-1.24.6-1.module+el8+1896+f3ff94df.ML.1.noarch.rpm
    MD5: c5bc412fd258e4415fde45256767041c
    SHA-256: 906613e9657e9f8f80c5862682aa7c791705b293f09dbf26d90e9894d9645bb8
    Size: 10.25 MB
  9. go-toolset-1.24.6-1.module+el8+1896+f3ff94df.x86_64.rpm
    MD5: 21d483b681c2314659a9f1ab6abde138
    SHA-256: e6023a874633734ff377bf4c0d8637ae1003cd7d97a69b95c9671a262b6f3120
    Size: 14.46 kB