Linux · Security advisory · May 10, 2022

RHSA-2022:1819: Security update for 9 packages

RHSA-2022:1819, released May 10, 2022, fixes 7 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1096
95th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
delveRHEL 80:1.7.2-1.module+el8.6.0+12972+ebab5911
go-toolsetRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golangRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-binRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-docsRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-miscRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-raceRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-srcRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19
golang-testsRHEL 80:1.17.7-1.module+el8.6.0+14297+32a15e19

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-38297 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.1096 None reported
High CVE-2021-39293 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0693 None reported
High CVE-2021-41771 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0470 None reported
High CVE-2021-41772 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0325 None reported
High CVE-2022-23806 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0307 None reported
High CVE-2022-23772 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0281 None reported
High CVE-2022-23773 delve: Go Toolset provides the Go programming language tools and libraries 9.8 0.0268 None reported
Showing 1 to 7 of 7 1