VDB
ALSA-2025%3A3773
ALSA-2025%3A3773
PUBLISHED
The Go Programming Language. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | golang-docs | 0, 0 |
| AlmaLinux:9 | golang-misc | 0, 0 |
| AlmaLinux:9 | golang-race | 0, 0 |
| AlmaLinux:9 | golang-src | 0, 0 |
| AlmaLinux:9 | delve | 0, 0 |
| AlmaLinux:9 | golang | 0, 0 |
| AlmaLinux:9 | go-toolset | 0, 0 |
| AlmaLinux:9 | golang-bin | 0, 0 |
| AlmaLinux:9 | golang-tests | 0, 0 |
Timeline
- Apr 10, 2025 CVE Published
- Feb 4, 2026 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:3773 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 third-party-advisory
- https://bugzilla.redhat.com/2310528 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2025-3773.html vendor-advisory