[ALSA-2026:60305] Important: go-toolset:rhel8 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-08-27
Description:
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.7+1 [almalinux-8.10.z] (JIRA:AlmaLinux-246426) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 golang-race-1.26.7-1.module_el8.10.0+4264+117c8fc2.aarch64.rpm 4195705c7cdac9d0323f6d6c647aaa5a54bd638deb5b47d40d9ac82e9eb5cc39
aarch64 golang-bin-1.26.7-1.module_el8.10.0+4264+117c8fc2.aarch64.rpm 4200db645e22914e14a6e0c7cdbacc41732cb5b894b63dce9b16769bdeb7b0cd
aarch64 go-toolset-1.26.7-1.module_el8.10.0+4264+117c8fc2.aarch64.rpm 424b3a6167df639c212e0c139683bf83d40bbc5636e8aa5c19255384586eff84
aarch64 delve-1.26.1-1.module_el8.10.0+4223+bd807c2e.aarch64.rpm a1827b550646f60c298aff1ca540c2df0b7c8425d215123b45d5f75d39816386
aarch64 golang-1.26.7-1.module_el8.10.0+4264+117c8fc2.aarch64.rpm a27ccd508bb683cb72648abd24ecad47205aae8c8ffeb3c1a20616f98bd05aa0
noarch golang-src-1.26.7-1.module_el8.10.0+4264+117c8fc2.noarch.rpm 7f478adaebb448a8b63616885cff3ca0951167a8f5359a7001aad682bc70f9b5
noarch golang-docs-1.26.7-1.module_el8.10.0+4264+117c8fc2.noarch.rpm 89a78973a5d93743bd0a0d1fef564e65fd16a19ba09a62d0eec1f5dba083f387
noarch golang-tests-1.26.7-1.module_el8.10.0+4264+117c8fc2.noarch.rpm 89c9d976fecacf8f23caf5efd4fe6c0a84533f89f8c3c90cfb8a9e2ac24f0a37
noarch golang-misc-1.26.7-1.module_el8.10.0+4264+117c8fc2.noarch.rpm f8d544a497d2981dede381efe088d9c4de808e1b279cd076cb126e207fd956b4
ppc64le delve-1.26.1-1.module_el8.10.0+4223+bd807c2e.ppc64le.rpm 22db6544eaf3352194e15fc5917ee151bebbb6dcd7c4beb0d6f8ce9e01bcfe31
ppc64le golang-race-1.26.7-1.module_el8.10.0+4264+117c8fc2.ppc64le.rpm 2e0290b6de3b54efee55606bc83ae9ea13911cab7cae3a743f802942f4aa5db2
ppc64le golang-bin-1.26.7-1.module_el8.10.0+4264+117c8fc2.ppc64le.rpm 75d336805037ab8e481897d6bc45275b2399ec6fd291b9fb979f85bea7bdc52a
ppc64le go-toolset-1.26.7-1.module_el8.10.0+4264+117c8fc2.ppc64le.rpm a02d41d4b8d9b2d627ee37d724d380a17fd3eae6779c31ea1f1e7813035f4612
ppc64le golang-1.26.7-1.module_el8.10.0+4264+117c8fc2.ppc64le.rpm a1f63a4660ae4b1968d780f6d285244122ddb1f7f378dbe4501146bf595b6268
s390x golang-bin-1.26.7-1.module_el8.10.0+4264+117c8fc2.s390x.rpm 1bcfe6d099c6fe21c5c1214179f750c11a5b9c38e07db84918a76a6ee6ad98da
s390x golang-race-1.26.7-1.module_el8.10.0+4264+117c8fc2.s390x.rpm 48ef1b11871510b28a24e2fd63502fd7a7951d22f45938d8acc3d2af7ba865c9
s390x golang-1.26.7-1.module_el8.10.0+4264+117c8fc2.s390x.rpm 49a16b3c31f224d246a6def17c116e248e92a79db628a7a8508dfc0bbc23a89d
s390x go-toolset-1.26.7-1.module_el8.10.0+4264+117c8fc2.s390x.rpm ce409317d459385c2ef14b9e6d3d880f264c7922c0749f74534b02130159efaf
x86_64 go-toolset-1.26.7-1.module_el8.10.0+4264+117c8fc2.x86_64.rpm 11f9e6000e48e6109a1b81f314b33b3463fc0229e121139a52348a9b1ac46e8d
x86_64 golang-bin-1.26.7-1.module_el8.10.0+4264+117c8fc2.x86_64.rpm 29a05bfc7a43b117e201de66b709557143edd3a3bf66bb48109216eac698dcd9
x86_64 golang-race-1.26.7-1.module_el8.10.0+4264+117c8fc2.x86_64.rpm 416d1829aadad94bc7212df608d0938e339995ec538086e47a2471a55a92164b
x86_64 golang-1.26.7-1.module_el8.10.0+4264+117c8fc2.x86_64.rpm 4d934bdc53ea779c479c636f7318df20807ec19fef52712fa06d66b86f8f518c
x86_64 delve-1.26.1-1.module_el8.10.0+4223+bd807c2e.x86_64.rpm e49c140a03e0c521c7c89f89a1df2e45d2071d7aa43617a68b4ad52079f27024
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.