[ALSA-2026:19137] Important: go-fdo-server security update
Type:
security
Severity:
important
Release date:
2026-05-26
Description:
This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location. Security Fix(es): * github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 go-fdo-server-1.0.1-1.el10_2.aarch64.rpm 5ab498e6933546fa79e2c6c9fe41f8d907a2d9b00a4e5cea62c56b5002b17c76
noarch go-fdo-server-rendezvous-1.0.1-1.el10_2.noarch.rpm 2f723b54c36ddf004e4bea960e425128bf2d983f8a3113e157997f07bad4fa7a
noarch go-fdo-server-owner-1.0.1-1.el10_2.noarch.rpm 4fdde5d0f325c9777d1a0493b93f5f958290c8b3b8c46095516d2e7e8ea2d03e
noarch go-fdo-server-manufacturer-1.0.1-1.el10_2.noarch.rpm 503719bae2e16f1ef8bfb6389d8210cb55c14a40a4f7f7f00e40c82bfd1f8095
x86_64 go-fdo-server-1.0.1-1.el10_2.x86_64.rpm 4e4fb74f429d74df1306269d2e2420e7c56b3e85e8ae93e0444ee4a7e5617934
x86_64_v2 go-fdo-server-1.0.1-1.el10_2.x86_64_v2.rpm 69a0191d7f1f7afd0e75e34877711add0ace146c613e15b094231ecf3a9c0d94
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.