Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

RHSA-2025:23737

HIGH7.5

Red Hat Security Advisory: go-toolset:rhel8 security update

Published Dec 22, 2025

Modified 6 days ago

Fix available

Affected Packages

Red Hat:rhel_e4s:8.8::appstreamdelve

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_e4s:8.8::appstreamdelve-debuginfo

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_e4s:8.8::appstreamdelve-debugsource

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_e4s:8.8::appstreamgo-toolset

Fixed in:

0:1.19.13-3.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-bin

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-docs

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-misc

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-race

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-src

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_e4s:8.8::appstreamgolang-tests

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamdelve

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_tus:8.8::appstreamdelve-debuginfo

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_tus:8.8::appstreamdelve-debugsource

Fixed in:

0:1.9.1-1.module+el8.8.0+16778+5fbb74f5

Red Hat:rhel_tus:8.8::appstreamgo-toolset

Fixed in:

0:1.19.13-3.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-bin

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-docs

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-misc

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-race

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-src

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

Red Hat:rhel_tus:8.8::appstreamgolang-tests

Fixed in:

0:1.19.13-18.module+el8.8.0+23822+add30b82

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:23737 REPORThttps://access.redhat.com/security/cve/CVE-2025-47906 REPORThttps://access.redhat.com/security/cve/CVE-2025-58183 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2396546 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2407258 ARTICLEhttps://go.dev/cl/691775 ARTICLEhttps://go.dev/cl/709861 ARTICLEhttps://go.dev/issue/74466 ARTICLEhttps://go.dev/issue/75677 ARTICLEhttps://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI ARTICLEhttps://groups.google.com/g/golang-announce/c/x5MKroML2yM ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-47906 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-58183 ADVISORYhttps://pkg.go.dev/vuln/GO-2025-3956 ADVISORYhttps://pkg.go.dev/vuln/GO-2025-4014 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23737.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-47906 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-58183

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-47906 CVE-2025-58183

Related

GO-2025-3956 GO-2025-4014

Ecosystems

Red Hat rhel_e4s 8.8 appstream Red Hat rhel_tus 8.8 appstream

Timeline

PublishedDec 22, 2025

ModifiedJan 8, 2026

RHSA-2025:23737 | Mondoo Vulnerability Intelligence