Amazon Linux 1 (EOL) Security Advisory: ALAS-2025-1971
Advisory Released Date: 2025-04-17
Advisory Updated Date: 2025-04-17
Severity:
Important
Issue Overview:
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. (CVE-2024-34156)
Affected Packages:
golang
Issue Correction:
Run yum update golang to update your system.
New Packages:
i686:
golang-1.23.7-1.50.amzn1.i686
golang-bin-1.23.7-1.50.amzn1.i686
golang-shared-1.23.7-1.50.amzn1.i686
noarch:
golang-misc-1.23.7-1.50.amzn1.noarch
golang-docs-1.23.7-1.50.amzn1.noarch
golang-tests-1.23.7-1.50.amzn1.noarch
golang-src-1.23.7-1.50.amzn1.noarch
src:
golang-1.23.7-1.50.amzn1.src
x86_64:
golang-bin-1.23.7-1.50.amzn1.x86_64
golang-1.23.7-1.50.amzn1.x86_64
golang-shared-1.23.7-1.50.amzn1.x86_64