Red Hat Security Advisory

RHSA-2026:0922

golang security update

Released 2026-01-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.5-1.el10_1, golang-1.25.5-1.el10_1, golang-bin-1.25.5-1.el10_1 +5

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295