ELSA-2026-37436

ELSA-2026-37436 - golang security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[1.26.5-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var

[1.26.5-1]
- Update to Go 1.26.5 (fips-1)

[1.25.7-1]
- Update to Go 1.25.7 (fips-1)

[1.25.5-1]
- Update to Go 1.25.5 (fips-1)

[1.25.3-5]
- gating.yaml: Add tier1 s390x tests

[1.25.3-4]
- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability

[1.25.3-3]
- plans/tier0.fmf: Import plan

[1.25.3-2]
- rpminspect.yaml: Add testdata to annocheck ignore

[1.25.3-1]
- Update to Go 1.25.3

[1.25.1-1]
- Update to Go1.25.1 -Resolves: RHEL-116849

Related CVEs

CVE-2026-39821

CVE-2026-39822

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	golang-1.26.5-1.0.1.el10_2.src.rpm	69c2593094b02b84194be400c208979d937b3c275b27cf8670ffd4407039782d	-	ol10_aarch64_appstream
	go-toolset-1.26.5-1.0.1.el10_2.aarch64.rpm	199fd452a027c6800700fbbaea0df6a97743bf898f29f58fd303cf7b7e277728	-	ol10_aarch64_appstream
	golang-1.26.5-1.0.1.el10_2.aarch64.rpm	9383ec3a43942358fa55b50b3127cfb858be2bdd24d8fc1b0bf067c9de493058	-	ol10_aarch64_appstream
	golang-bin-1.26.5-1.0.1.el10_2.aarch64.rpm	80ba27e7047cc1d96b7254241b94923f1d81082fb19ca26206096d31a030567d	-	ol10_aarch64_appstream
	golang-docs-1.26.5-1.0.1.el10_2.noarch.rpm	013d388cce4a07955634385f7bc18f5676ba2c01e45c6b8c9241fd94bdab4bda	-	ol10_aarch64_appstream
	golang-misc-1.26.5-1.0.1.el10_2.noarch.rpm	82159d8d0c9f4c742b346f9a0f7f51791a8001a8fc7684b304f708d677e04669	-	ol10_aarch64_appstream
	golang-race-1.26.5-1.0.1.el10_2.aarch64.rpm	6f5477e5d1fb033e1573a3adbcd0df4a9711c3c62178747f36487c72a0da3430	-	ol10_aarch64_appstream
	golang-src-1.26.5-1.0.1.el10_2.noarch.rpm	1ab71d0d2f946ce4ee654421df2939193d0baa027475b8b5e062e5078063d393	-	ol10_aarch64_appstream
	golang-tests-1.26.5-1.0.1.el10_2.noarch.rpm	5983f2a0e9651335f556bf2b81220ef4be3232cbdf76dc81d6faf4e33e97ddd8	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	golang-1.26.5-1.0.1.el10_2.src.rpm	69c2593094b02b84194be400c208979d937b3c275b27cf8670ffd4407039782d	-	ol10_x86_64_appstream
	go-toolset-1.26.5-1.0.1.el10_2.x86_64.rpm	60299b7ee9e7de1d447820aca7290c05ecac9c632add92ab27bef9e74161519b	-	ol10_x86_64_appstream
	golang-1.26.5-1.0.1.el10_2.x86_64.rpm	f29a8cb07c2dc88b87d191758b39305e7b548e5a867e4f974c80f6eab1aa6889	-	ol10_x86_64_appstream
	golang-bin-1.26.5-1.0.1.el10_2.x86_64.rpm	b854df18d378b637ef2ed7ed2be30b1d91b82b5ee4a30cf62c204df3221044de	-	ol10_x86_64_appstream
	golang-docs-1.26.5-1.0.1.el10_2.noarch.rpm	013d388cce4a07955634385f7bc18f5676ba2c01e45c6b8c9241fd94bdab4bda	-	ol10_x86_64_appstream
	golang-misc-1.26.5-1.0.1.el10_2.noarch.rpm	82159d8d0c9f4c742b346f9a0f7f51791a8001a8fc7684b304f708d677e04669	-	ol10_x86_64_appstream
	golang-race-1.26.5-1.0.1.el10_2.x86_64.rpm	d192f573869ae1084b48dd165c2ccca0c3176c7dcc42075b8e5b969fbe7358c3	-	ol10_x86_64_appstream
	golang-src-1.26.5-1.0.1.el10_2.noarch.rpm	1ab71d0d2f946ce4ee654421df2939193d0baa027475b8b5e062e5078063d393	-	ol10_x86_64_appstream
	golang-tests-1.26.5-1.0.1.el10_2.noarch.rpm	5983f2a0e9651335f556bf2b81220ef4be3232cbdf76dc81d6faf4e33e97ddd8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team