ELSA-2026-37435

ELSA-2026-37435 - golang security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-10

Description

[1.26.5-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var

[1.26.5-1]
- Update to Go 1.26.5 (fips-1)
- Resolves: RHEL-193476

[1.25.7-1]
- Update to Go 1.25.7 (fips-1)
- Resolves: RHEL-146452

[1.25.5-1]
- Update to Go 1.25.5 (fips-1)
- Resolves: RHEL-139364

[1.25.3-2]
- Cleanup lib/ ownership

[1.25.3-1]
- Update to Go 1.25.3
- Resolves: RHEL-121220

[1.25.1-1]
- Update to Go 1.25.1
- Resolves: RHEL-116850

[1.25.0-2]
- Revert DWARF5 defaults
- Add elf5 to rpminspect.yaml
- Related: RHEL-109557

[1.25.0-1]
- Update to Go 1.25.0
- Set GOAMD64 to v2 to align with new architecture baselines
- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
- Resolves: RHEL-109557

[1.24.6-1]
- Update to Go 1.24.6 (fips-1)
- Resolves: RHEL-106461

Related CVEs

CVE-2026-39821

CVE-2026-39822

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	golang-1.26.5-1.0.1.el9_8.src.rpm	d34968d1c3ffee0a609733ceceb8d4967b85532821e7b6fb98f4d21c9f0c3863	-	ol9_aarch64_appstream
	go-toolset-1.26.5-1.0.1.el9_8.aarch64.rpm	37a902ba5da0efebf8687aa715380f45f00e7cd238c5a1d261fe4b65fdf371e3	-	ol9_aarch64_appstream
	golang-1.26.5-1.0.1.el9_8.aarch64.rpm	e8a743c1bfa302e4c80485bec004c5f738211d9bb12a7dc803068b8394078b2a	-	ol9_aarch64_appstream
	golang-bin-1.26.5-1.0.1.el9_8.aarch64.rpm	1bec1244b35ce2a9bc6ec60bbc7d7e091b538d8dba608443fa2715aad4fde90f	-	ol9_aarch64_appstream
	golang-docs-1.26.5-1.0.1.el9_8.noarch.rpm	05866dbbe1d6c0b4bb641ce567735c287d41e326d47458f367ea23b56f14f4c9	-	ol9_aarch64_appstream
	golang-misc-1.26.5-1.0.1.el9_8.noarch.rpm	bbbd3588d5dbee625c836e5dd328a04b4d13f26a9f3d7f0342cb68d04a3cbe9b	-	ol9_aarch64_appstream
	golang-race-1.26.5-1.0.1.el9_8.aarch64.rpm	d2a2326415fff4a0c2cb3dcfd1452a6e4d3ca549473346ce1a6845d52528351d	-	ol9_aarch64_appstream
	golang-src-1.26.5-1.0.1.el9_8.noarch.rpm	5c95fa830502c1bb8e0e37477e84a42038014387e7f7228943bdf3a9976508be	-	ol9_aarch64_appstream
	golang-tests-1.26.5-1.0.1.el9_8.noarch.rpm	e81bbb2d70a32b501239931a5ee9746d3c32dccdfcf37634723655ea38562f4b	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	golang-1.26.5-1.0.1.el9_8.src.rpm	d34968d1c3ffee0a609733ceceb8d4967b85532821e7b6fb98f4d21c9f0c3863	-	ol9_x86_64_appstream
	go-toolset-1.26.5-1.0.1.el9_8.x86_64.rpm	b89d520e55565035b4f7113bb1cd84ae041348f5e280e090fdedba034763288c	-	ol9_x86_64_appstream
	golang-1.26.5-1.0.1.el9_8.x86_64.rpm	ce07ea7ce3985c8ac105791f50e41dcc7ef8d393054b3f9d96aa0bf42ebc493a	-	ol9_x86_64_appstream
	golang-bin-1.26.5-1.0.1.el9_8.x86_64.rpm	5e5a7dc53d928b449d5c423bf8397ef3f9a9a63d08f87f7c1ff45b4b7c278a2d	-	ol9_x86_64_appstream
	golang-docs-1.26.5-1.0.1.el9_8.noarch.rpm	05866dbbe1d6c0b4bb641ce567735c287d41e326d47458f367ea23b56f14f4c9	-	ol9_x86_64_appstream
	golang-misc-1.26.5-1.0.1.el9_8.noarch.rpm	bbbd3588d5dbee625c836e5dd328a04b4d13f26a9f3d7f0342cb68d04a3cbe9b	-	ol9_x86_64_appstream
	golang-race-1.26.5-1.0.1.el9_8.x86_64.rpm	13c5ed93b816fa35f78fea11acb8986147f16af4a061b0d68f871fcbc423a56b	-	ol9_x86_64_appstream
	golang-src-1.26.5-1.0.1.el9_8.noarch.rpm	5c95fa830502c1bb8e0e37477e84a42038014387e7f7228943bdf3a9976508be	-	ol9_x86_64_appstream
	golang-tests-1.26.5-1.0.1.el9_8.noarch.rpm	e81bbb2d70a32b501239931a5ee9746d3c32dccdfcf37634723655ea38562f4b	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team