ELSA-2026-19022

ELSA-2026-19022 - golang security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-08

Description

[1.26.2-2.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var

[1.26.2-2]
- Do not ignore any tests in check

[1.26.2-1]
- Update to Go 1.26.2 (fips-2)

[1.26.1-1]
- Update to Go 1.26.1

[1.25.7-1]
- Update to Go 1.25.7 (fips-1)

[1.25.5-1]
- Update to Go 1.25.5 (fips-1)

[1.25.3-5]
- gating.yaml: Add tier1 s390x tests

[1.25.3-4]
- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability

[1.25.3-3]
- plans/tier0.fmf: Import plan

[1.25.3-2]
- rpminspect.yaml: Add testdata to annocheck ignore

Related CVEs

CVE-2026-25679

CVE-2026-27137

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	golang-1.26.2-2.0.1.el10_2.src.rpm	4c822758ac23594ac03bcd2284563ff0e1631ed1761f1fe9e259ad19e5b61717	-	ol10_aarch64_appstream
	go-toolset-1.26.2-2.0.1.el10_2.aarch64.rpm	8bf8f4f218aee0902dff17fe71825d4ccd1d39a09c54b3bfcd531a958b429df3	-	ol10_aarch64_appstream
	golang-1.26.2-2.0.1.el10_2.aarch64.rpm	c7e5cf49518ac9afd60051db24d8ceaef37419e74be76db294efa0290128aa8a	-	ol10_aarch64_appstream
	golang-bin-1.26.2-2.0.1.el10_2.aarch64.rpm	f02be42d8b650f5d36b96c643e48dd8d3f49162e58cb96e676c16dbdcbb12912	-	ol10_aarch64_appstream
	golang-docs-1.26.2-2.0.1.el10_2.noarch.rpm	95f973161da8a8da9b9b9cc57311b99198511ece08383537255e9408b237706a	-	ol10_aarch64_appstream
	golang-misc-1.26.2-2.0.1.el10_2.noarch.rpm	eb24cb1365726b7e77a8d4cf469d9cf5daf00d480e8897316398cf11c7ed7146	-	ol10_aarch64_appstream
	golang-race-1.26.2-2.0.1.el10_2.aarch64.rpm	f0234785edc113c796342385cf9608745840df50644a7176cadd3081fc86e3b5	-	ol10_aarch64_appstream
	golang-src-1.26.2-2.0.1.el10_2.noarch.rpm	95658bda006fa78cb4563e707efab2617dbd6b2814e3b926cc196579d6b37c69	-	ol10_aarch64_appstream
	golang-tests-1.26.2-2.0.1.el10_2.noarch.rpm	03f186ba42e5128c603835764d73d7ee90ab96e6c95e2e78e8e83ae5853320df	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	golang-1.26.2-2.0.1.el10_2.src.rpm	4c822758ac23594ac03bcd2284563ff0e1631ed1761f1fe9e259ad19e5b61717	-	ol10_x86_64_appstream
	go-toolset-1.26.2-2.0.1.el10_2.x86_64.rpm	43f501d9322e6a74ed25d48e0a25d59e7719667ed8c8cdd15bc987a36cf7a0cf	-	ol10_x86_64_appstream
	golang-1.26.2-2.0.1.el10_2.x86_64.rpm	5bd8a6760abcfb61b39ed7797822f4520a44c9bfa759f46fa7d659d228672f9e	-	ol10_x86_64_appstream
	golang-bin-1.26.2-2.0.1.el10_2.x86_64.rpm	5a8a9d789fd48c52f3f03ff6cd8a6b48cba3767a140bc0d790c8194c233d7f43	-	ol10_x86_64_appstream
	golang-docs-1.26.2-2.0.1.el10_2.noarch.rpm	95f973161da8a8da9b9b9cc57311b99198511ece08383537255e9408b237706a	-	ol10_x86_64_appstream
	golang-misc-1.26.2-2.0.1.el10_2.noarch.rpm	eb24cb1365726b7e77a8d4cf469d9cf5daf00d480e8897316398cf11c7ed7146	-	ol10_x86_64_appstream
	golang-race-1.26.2-2.0.1.el10_2.x86_64.rpm	6c9bca31eb4a2c47c73498319799bb81f1e2425884625dc1c70c6a18c9609c71	-	ol10_x86_64_appstream
	golang-src-1.26.2-2.0.1.el10_2.noarch.rpm	95658bda006fa78cb4563e707efab2617dbd6b2814e3b926cc196579d6b37c69	-	ol10_x86_64_appstream
	golang-tests-1.26.2-2.0.1.el10_2.noarch.rpm	03f186ba42e5128c603835764d73d7ee90ab96e6c95e2e78e8e83ae5853320df	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team