VDB
ALSA-2024%3A4237
ALSA-2024%3A4237
PUBLISHED
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | golang-misc | 0, 0 |
| AlmaLinux:8 | go-toolset | 0, 0 |
| AlmaLinux:8 | golang | 0, 0 |
| AlmaLinux:8 | delve | 0, 0 |
| AlmaLinux:8 | golang-src | 0, 0 |
| AlmaLinux:8 | golang-tests | 0, 0 |
| AlmaLinux:8 | golang-docs | 0, 0 |
| AlmaLinux:8 | golang-bin | 0, 0 |
Timeline
- Jul 2, 2024 CVE Published
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:4237 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-24789 third-party-advisory
- https://access.redhat.com/security/cve/CVE-2024-24790 third-party-advisory
- https://bugzilla.redhat.com/2292668 third-party-advisory
- https://bugzilla.redhat.com/2292787 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2024-4237.html vendor-advisory