[ALSA-2026:86093] Important: golang security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-21
Description:
The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [almalinux-10.2.z] (JIRA:AlmaLinux-287191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 golang-bin-1.26.10-1.el10_2.alma.1.aarch64.rpm 349fbdb36115dec6a7f1c96db7b60ec5f7777e39dd9e6695aa40f47a670ef4de
aarch64 go-toolset-1.26.10-1.el10_2.alma.1.aarch64.rpm 7f23aa5eab3fa846b72a832c6529b4bc1fec7821a2c834ea9a2dfcd0a2a6f981
aarch64 golang-1.26.10-1.el10_2.alma.1.aarch64.rpm 82f4b6e580912b5c95116ed05ab0fc12ba766620a80559e0a4e842a9e1f92dc2
aarch64 golang-race-1.26.10-1.el10_2.alma.1.aarch64.rpm df53bfeab539b2806f812c1d0e6a0881a732f468d99fdb99d44a9e0764ccbd74
noarch golang-docs-1.26.10-1.el10_2.alma.1.noarch.rpm 2d79e769efee24206777297d81950a59cd8f92825199a4b095bd00a11b65fe72
noarch golang-src-1.26.10-1.el10_2.alma.1.noarch.rpm 43d81a2ae0e8050075f42624aeeb87c9923f73d9eff287c06c6f5161f582dddc
noarch golang-tests-1.26.10-1.el10_2.alma.1.noarch.rpm 8564845c95e3ad9ae431701bfc86844c9f231174349f09fa3bf96764c9e304bb
noarch golang-misc-1.26.10-1.el10_2.alma.1.noarch.rpm 9cca556f68ec191e90e65a5ff40a7482d60e4866fea7a72fa75649b2f73a01f7
ppc64le golang-race-1.26.10-1.el10_2.alma.1.ppc64le.rpm 4669d103ecdc543df988b7d4bb54e7baee2b6ff4413999c303f613a1cc12b0f8
ppc64le golang-1.26.10-1.el10_2.alma.1.ppc64le.rpm c0f923ffd684dc9887634ddf4d2230abc47d8856562d21ccd8e8bc95fc138f62
ppc64le golang-bin-1.26.10-1.el10_2.alma.1.ppc64le.rpm f394ea4e1f6f6538ec9074065723c2497dca8bd64ff41117c8adc3f9e832d105
ppc64le go-toolset-1.26.10-1.el10_2.alma.1.ppc64le.rpm ff29956d0f409ec7cfff99bacf6d38ebe60e7ff9a53d86528e3d797e75f98ed4
s390x golang-bin-1.26.10-1.el10_2.alma.1.s390x.rpm 69a54b47d1798d33d6e0d508ff8d87bc9daf5bfe8424ba68d9b9c180cf8acf84
s390x go-toolset-1.26.10-1.el10_2.alma.1.s390x.rpm 993e01850ffa4fded9cee9e51ce94a2ccf3849105c60e942dd813e3528e08c00
s390x golang-race-1.26.10-1.el10_2.alma.1.s390x.rpm b4f38843bc8ad5d9d32c7afb232931ac0f1b47cd31b60b84d1675754e317c518
s390x golang-1.26.10-1.el10_2.alma.1.s390x.rpm fb2bce0b26bc5132d037a1c4f25046afa661acef4ffc8222c9ec18a8ebb62c58
x86_64 go-toolset-1.26.10-1.el10_2.alma.1.x86_64.rpm 0c2a6828a4449706a3f1127846c6f09aeb0f2dc0ca27327296b1f67707b2b65a
x86_64 golang-race-1.26.10-1.el10_2.alma.1.x86_64.rpm 4a5a42bcba5ae2e0602c1839ce6885db4ad773da6b02da3f004e27f1677f54a1
x86_64 golang-1.26.10-1.el10_2.alma.1.x86_64.rpm 774d98b72e7ad22223d78dfb1317848b0f7d94ae4a9c0f431db625a6111c7134
x86_64 golang-bin-1.26.10-1.el10_2.alma.1.x86_64.rpm e6a2675092b6ad6a7e7ffe961b309b6b88889c20bbbde2ee17abe934b98fa68b
x86_64_v2 golang-race-1.26.10-1.el10_2.alma.1.x86_64_v2.rpm 0bda66e79e27fc96f73a2ebd4650d589b62cf232b1be72cf0859210788b10d61
x86_64_v2 go-toolset-1.26.10-1.el10_2.alma.1.x86_64_v2.rpm 2428b0e9098a03a221ecd04257b05ea6a36a1508e0fafe547b505ca43e10b1a6
x86_64_v2 golang-1.26.10-1.el10_2.alma.1.x86_64_v2.rpm 4e637daaca0723122053a695eee759d1b7ff858a90781cef28194ab1ed12ee87
x86_64_v2 golang-bin-1.26.10-1.el10_2.alma.1.x86_64_v2.rpm b2fda975bc0a066ff6c27ed5c8bc45902146cfb0bdc47450d0cacc8c3f43f7a1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.