golang-1.24.6-1.el9_6

エラータID: AXSA:2025-10754:04

リリース日: 
2025/08/19 Tuesday - 14:01
題名: 
golang-1.24.6-1.el9_6
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The golang packages provide the Go programming language compiler.

Security Fix(es):

* cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-4674
The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS (e.g. Git), but contains metadata for another VCS (e.g. Mercurial). Modules which are retrieved using the go command line, i.e. via "go get", are not affected.

解決策: 

Update packages.

CVE: 
CVE-2025-4674
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. golang-1.24.6-1.el9_6.src.rpm
    MD5: 6f3317d1162e54f07f81d8fae199c102
    SHA-256: 57ba4b68547e4c063a996fff33667afae8d3f25b355dcf473c367a8d586a2a26
    Size: 31.64 MB

Asianux Server 9 for x86_64
  1. golang-1.24.6-1.el9_6.x86_64.rpm
    MD5: 841d0dcf546e761660082908dd53b30d
    SHA-256: e73212150db0d8a30435dbbde44d79e87de01270b768210ef4586114a92db58a
    Size: 1.25 MB
  2. golang-bin-1.24.6-1.el9_6.x86_64.rpm
    MD5: 197451764ce6c293686b4fe124f9b5ee
    SHA-256: acbccf2ec52eeecea6af09b070eac5f68fc9a975fd5709caad3b1d5e755dfb49
    Size: 66.76 MB
  3. golang-docs-1.24.6-1.el9_6.noarch.rpm
    MD5: 06156bd6ae32c53607a082f1a7a3b9b6
    SHA-256: 9173682eb0a99bf2bbff1c709e21ac5eec69959f4f39de0164fe893804e5596e
    Size: 112.32 kB
  4. golang-misc-1.24.6-1.el9_6.noarch.rpm
    MD5: dfd0bdea33c161a60092a6c9aff41db5
    SHA-256: 03eace2b503b7cba8f2dbde27f5dfbdf6c0dde7badfc39568bbed9acb0faf0c4
    Size: 43.62 kB
  5. golang-race-1.24.6-1.el9_6.x86_64.rpm
    MD5: 40decf1315e692668807814887c8f9cc
    SHA-256: 8d95dab28f2499a808a16d816ef8679bff457b989fca45629b1482830e44a675
    Size: 1.69 MB
  6. golang-src-1.24.6-1.el9_6.noarch.rpm
    MD5: b16caad9992eb1fd3c5a8925034e8e24
    SHA-256: 03e5ed052fe0aa47e622c33444250a40cf1453db04e70c3fcd40b8aa50ec7f87
    Size: 11.03 MB
  7. golang-tests-1.24.6-1.el9_6.noarch.rpm
    MD5: 23652d025a5dd7128b734898da2dc661
    SHA-256: 573cb89813927afd0e335b6488920bc820a4f3908207d695e65c1bba80b567f4
    Size: 11.56 MB
  8. go-toolset-1.24.6-1.el9_6.x86_64.rpm
    MD5: 6885d76c3370a465ecbafeece1b3c4e9
    SHA-256: ebca511669c5dda02c26d72f5bc296810e93245cb41230889604aab4fde4f582
    Size: 9.88 kB