ELSA-2026-19181

ELSA-2026-19181 - golang security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-12

Description

[1.26.2-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var

[1.26.2-1]
- Update to Go 1.26.2 (fips-2)
- Resolves: RHEL-169929

[1.26.1-1]
- Update to Go 1.26.1
- Resolves: RHEL-153434

[1.25.7-1]
- Update to Go 1.25.7 (fips-1)
- Resolves: RHEL-146452

[1.25.5-1]
- Update to Go 1.25.5 (fips-1)
- Resolves: RHEL-139364

[1.25.3-2]
- Cleanup lib/ ownership

[1.25.3-1]
- Update to Go 1.25.3
- Resolves: RHEL-121220

[1.25.1-1]
- Update to Go 1.25.1
- Resolves: RHEL-116850

[1.25.0-2]
- Revert DWARF5 defaults
- Add elf5 to rpminspect.yaml
- Related: RHEL-109557

[1.25.0-1]
- Update to Go 1.25.0
- Set GOAMD64 to v2 to align with new architecture baselines
- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
- Resolves: RHEL-109557

Related CVEs

CVE-2026-25679

CVE-2026-27137

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	golang-1.26.2-1.0.1.el9_8.src.rpm	2280abd9ae3379394bf48b0c97f5cfb5681b4ccea491c26d958706b117c79a78	-	ol9_aarch64_appstream
	go-toolset-1.26.2-1.0.1.el9_8.aarch64.rpm	94772b7dad88682e60379213e2aad2e5c030e93089f815d5eee0872d12a90da3	-	ol9_aarch64_appstream
	golang-1.26.2-1.0.1.el9_8.aarch64.rpm	a108913f417c0de8012251a02b2136754eecd97aba6e44509f74a0e5361028ff	-	ol9_aarch64_appstream
	golang-bin-1.26.2-1.0.1.el9_8.aarch64.rpm	ba290ba2a2d3b71b0e4adbd29a6828bdd8e13d8e05be1ad82a5cab0670e9c927	-	ol9_aarch64_appstream
	golang-docs-1.26.2-1.0.1.el9_8.noarch.rpm	0d6fb7fae6965c2e343cac776f5bd119b056e48f59af224dcf86d33ce8ffacac	-	ol9_aarch64_appstream
	golang-misc-1.26.2-1.0.1.el9_8.noarch.rpm	a2fd710d4fcffe65aa754a40a29dd9efbf36ce382f5828515c31651084c418f4	-	ol9_aarch64_appstream
	golang-race-1.26.2-1.0.1.el9_8.aarch64.rpm	70f35792114a50919e1a3575ec1629971e7f5090ca71c9d39c30eed998fb6935	-	ol9_aarch64_appstream
	golang-src-1.26.2-1.0.1.el9_8.noarch.rpm	57ae3d8a29caeeddebb009e59107dcb690d1b062e2c7ee465e2adc153a44dcb7	-	ol9_aarch64_appstream
	golang-tests-1.26.2-1.0.1.el9_8.noarch.rpm	a9d9c44bbb7397f67a45d5ed0d996572c1684eeebf5056f519cc8c7e4e303f37	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	golang-1.26.2-1.0.1.el9_8.src.rpm	2280abd9ae3379394bf48b0c97f5cfb5681b4ccea491c26d958706b117c79a78	-	ol9_x86_64_appstream
	go-toolset-1.26.2-1.0.1.el9_8.x86_64.rpm	bea741006bbace4eb6d3ee8c59de82cc45f1b2fa8ce0ade9e2980c9035b6ff4f	-	ol9_x86_64_appstream
	golang-1.26.2-1.0.1.el9_8.x86_64.rpm	d34395d6ed96a67a7b9e9d12aa69e60967b91cd62bfe6a0d848edf1dd802f097	-	ol9_x86_64_appstream
	golang-bin-1.26.2-1.0.1.el9_8.x86_64.rpm	0d67026bb7a7e4d0a8a06e9ff122ff2a76fab7ffc0f9e38104d610ba6950831c	-	ol9_x86_64_appstream
	golang-docs-1.26.2-1.0.1.el9_8.noarch.rpm	0d6fb7fae6965c2e343cac776f5bd119b056e48f59af224dcf86d33ce8ffacac	-	ol9_x86_64_appstream
	golang-misc-1.26.2-1.0.1.el9_8.noarch.rpm	a2fd710d4fcffe65aa754a40a29dd9efbf36ce382f5828515c31651084c418f4	-	ol9_x86_64_appstream
	golang-race-1.26.2-1.0.1.el9_8.x86_64.rpm	a5b1147a36caeb557ced982f42e5cccf26365ff80bbbf625708b6cb93f52d0a4	-	ol9_x86_64_appstream
	golang-src-1.26.2-1.0.1.el9_8.noarch.rpm	57ae3d8a29caeeddebb009e59107dcb690d1b062e2c7ee465e2adc153a44dcb7	-	ol9_x86_64_appstream
	golang-tests-1.26.2-1.0.1.el9_8.noarch.rpm	a9d9c44bbb7397f67a45d5ed0d996572c1684eeebf5056f519cc8c7e4e303f37	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team