Red Hat Security AdvisoryRHSA-2026:19022
golang security update
Released 2026-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.2-2.el10_2, golang-1.26.2-2.el10_2, golang-bin-1.26.2-2.el10_2 +5
Fixes 3 records
Priority MEDIUM 42
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-04-08 · Partial fix · 1.26.2 CWE-295
Priority MEDIUM 40
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00661 · Published 2026-03-06 · Partial fix · 1.26.1 CWE-295
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-06 · Partial fix · 1.25.8, 1.26.1 CWE-425
