[ALSA-2026:86196] Important: golang security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-21
Description:
The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [almalinux-9.8.z] (JIRA:AlmaLinux-287192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 go-toolset-1.26.10-1.el9_8.aarch64.rpm 2f2fbd824c6651bd2e1c3a3a69ecb4b3a6b147ebe2bae0545868590eba675083
aarch64 golang-race-1.26.10-1.el9_8.aarch64.rpm 5b29315daf9f0c49cbd7fd3b75e504d96cc37c655dd6625cc82bb69d7c96f3dc
aarch64 golang-1.26.10-1.el9_8.aarch64.rpm 8745e6f4bd14f2eb55ad3de27690c9ad0343a8301a47fcc0881f2d09f60ecdb6
aarch64 golang-bin-1.26.10-1.el9_8.aarch64.rpm c7e8557f2e9dcdc399f63fc4560897754bebccc3dd7859bd5e5ce899b83ea9ea
noarch golang-docs-1.26.10-1.el9_8.noarch.rpm 2052d08e651131149d53da41cc8a12baf5da4aef770762486d3305a875127cf2
noarch golang-src-1.26.10-1.el9_8.noarch.rpm 80f6768e4deaf99aae5d2cf4c4c7c6c1ff14e79f61ecd2889638f07e07877269
noarch golang-tests-1.26.10-1.el9_8.noarch.rpm c95cd98460e3df6867fd54b4f44c90a35087fc4b5568027586b22abb43c9b5b1
noarch golang-misc-1.26.10-1.el9_8.noarch.rpm f96102b3b183f1b77561ed40706967006177c5c56689a7e9b3ed657ff0814c39
ppc64le golang-race-1.26.10-1.el9_8.ppc64le.rpm 39f8ce4c77c5f7e95bbd8a928784a89ed467b7c2dbcc73de631140ed756fc628
ppc64le golang-1.26.10-1.el9_8.ppc64le.rpm 467b1cba39cea59f5174cd68cc84d46ef457f0cce385599d854a45e952e6ac68
ppc64le go-toolset-1.26.10-1.el9_8.ppc64le.rpm 9becd1ebe96979df212266af4d65e1f163a388d9765f6ad5a032179da7943e96
ppc64le golang-bin-1.26.10-1.el9_8.ppc64le.rpm d03e884335eb9ba84fd0c555c82d188223fd3be179b66cc168b4fbf7cce9b7ad
s390x go-toolset-1.26.10-1.el9_8.s390x.rpm 4d3685223eca043357ceaeb871f89185a434bfdad0ecb5f523406dfded565abd
s390x golang-bin-1.26.10-1.el9_8.s390x.rpm 5168d1467393a5acd60c89ca70bf20f45f48bc464b11a071c526ef36bc921ca6
s390x golang-race-1.26.10-1.el9_8.s390x.rpm 8280c12f60f8f3c0ee74a5d507b6efe5cc12fe2da4ac3f21410d186d765d53d0
s390x golang-1.26.10-1.el9_8.s390x.rpm 8311a5f6306169240669c32b2d373af0ce1c25fd3575e83a5efbab50f54b4d79
x86_64 golang-race-1.26.10-1.el9_8.x86_64.rpm 129949cecba2babac5f50e182ff689ecb316e3988756c0a6103b1e002a804b2a
x86_64 go-toolset-1.26.10-1.el9_8.x86_64.rpm 20bff1f91b993a6f54c9d4786e61573ee9720845085e771eebe1c0fc08cc4fcc
x86_64 golang-bin-1.26.10-1.el9_8.x86_64.rpm 5c7c8439ae4ed9f449e92c8bb82cf7fe41f6c7c2e024ded89851864b9b04098d
x86_64 golang-1.26.10-1.el9_8.x86_64.rpm 6db095261e3ea0c3e7ba8bb610da95512c649df954f1d33a63e6833e9101136c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.