RHSA-2016:1538MediumCVSS 5.3

Red Hat Security Advisory: golang security, bug fix, and enhancement update

Published
August 2, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (5)

CVE-2015-5739 →CVE-2015-5740 →CVE-2015-5741 →CVE-2016-3959 →CVE-2016-5386 →

📋 Description

CVE-2015-5739 — golang: HTTP request smuggling in net/http library CVE-2015-5740 — golang: HTTP request smuggling in net/http library CVE-2015-5741 — golang: HTTP request smuggling in net/http library CVE-2016-3959 — golang: infinite loop in several big integer routines CVE-2016-5386 — Go: sets environmental variable based on user supplied Proxy request header

🎯 Affected products8

  • Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-0:1.6.3-1.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-bin-0:1.6.3-1.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-docs-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-misc-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-src-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • golang-tests-0:1.6.3-1.el7_2.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (5)