Red Hat Product Errata RHSA-2026:60305 - Security Advisory Issued: 2026-08-26 Updated: 2026-08-26 RHSA-2026:60305 - Security Advisory Overview Updated Packages Synopsis Important: go-toolset:rhel8 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) net/ http: golang: Go net/ http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) Bug Fix(es) and Enhancement(s): Update Go to version 1.26.7+1 [rhel-8.10.z] (JIRA:RHEL-246426) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2515815 - CVE-2026-33818 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal BZ - 2515820 - CVE-2026-56860 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution BZ - 2515827 - CVE-2026-56853 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service BZ - 2515838 - CVE-2026-56858 html/template: golang: Go html/template: Cross-Site Scripting via pathological input BZ - 2515839 - CVE-2026-56862 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages BZ - 2515840 - CVE-2026-56859 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue RHEL-246426 - Update Go to version 1.26.7+1 [rhel-8.10.z] CVEs CVE-2026-33818 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM delve-1.26.1-1.module+el8.10.0+24516+40554724.src.rpm SHA-256: 50a19476849aa687d946f7f9f8f6610cdad6881beaabd2aea685b31c301b14dd golang-1.26.7-1.module+el8.10.0+24751+b3673b3e.src.rpm SHA-256: 6855bba63a52ca6ad66426984ef193586d61dff67239824015ef8e7939af7569 x86_64 delve-1.26.1-1.module+el8.10.0+24516+40554724.x86_64.rpm SHA-256: 8b47ea06ce7edac6f2e772b85f27f0b57e1e8c8fa20efd2fab7e2ddd44307e05 delve-debuginfo-1.26.1-1.module+el8.10.0+24516+40554724.x86_64.rpm SHA-256: a09f03a11f0520d5159fd10c480038a8c1d23bcad646bf6c04a386caf0cbc7d6 delve-debugsource-1.26.1-1.module+el8.10.0+24516+40554724.x86_64.rpm SHA-256: a4796939fe5a3128794fa8c9448643be26debc920b59e4599cf41534706087e5 go-toolset-1.26.7-1.module+el8.10.0+24751+b3673b3e.x86_64.rpm SHA-256: 904158e6eafc756d9d9dec6d438886675018986cdf3b0f742a3e2792ab7bf304 golang-1.26.7-1.module+el8.10.0+24751+b3673b3e.x86_64.rpm SHA-256: 1facd5c9e3f04468fc50fce509a943db93863595ff88405c5f162e535bfec142 golang-bin-1.26.7-1.module+el8.10.0+24751+b3673b3e.x86_64.rpm SHA-256: cc6e8e32ace090ded663c45d0ae8ef03cf8b522eb8540de8a4a63c43a15031e8 golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-race-1.26.7-1.module+el8.10.0+24751+b3673b3e.x86_64.rpm SHA-256: 35cc999fc8c46022c69f6a11965c49a4c7874b383de66116bab80fd3cc57ca4c golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 Red Hat Enterprise Linux for IBM z Systems 8 SRPM golang-1.26.7-1.module+el8.10.0+24751+b3673b3e.src.rpm SHA-256: 6855bba63a52ca6ad66426984ef193586d61dff67239824015ef8e7939af7569 s390x golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 go-toolset-1.26.7-1.module+el8.10.0+24751+b3673b3e.s390x.rpm SHA-256: b7dfbaf5fff576e280e10f0c8b26baae435742c8e99771b7863bb9862e748bf2 golang-1.26.7-1.module+el8.10.0+24751+b3673b3e.s390x.rpm SHA-256: 11b310e0f3e3ff60581a2a61157f00cba0bbe67658ac9e4f1969a3fc8aabe009 golang-bin-1.26.7-1.module+el8.10.0+24751+b3673b3e.s390x.rpm SHA-256: 31bc72d3fa41e722842fd7b1241d7dff5c9d0e31ca2a9e66f1aa5f969edb0edc golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-race-1.26.7-1.module+el8.10.0+24751+b3673b3e.s390x.rpm SHA-256: d3aa477ec3d42815b7b483f61430e011f065d60c673e70b3692f2eac98581a39 golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 Red Hat Enterprise Linux for Power, little endian 8 SRPM delve-1.26.1-1.module+el8.10.0+24516+40554724.src.rpm SHA-256: 50a19476849aa687d946f7f9f8f6610cdad6881beaabd2aea685b31c301b14dd golang-1.26.7-1.module+el8.10.0+24751+b3673b3e.src.rpm SHA-256: 6855bba63a52ca6ad66426984ef193586d61dff67239824015ef8e7939af7569 ppc64le golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-src-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a2ce940a9a129502c824e33cd9e67e2b5c0551fe38dbdd40d1acb3019f32a1e1 golang-tests-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: faf22ac18057eac68cdd348c552c6e6e7269ca77b374e0e90cbdc97ebf6d0026 golang-docs-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: a7ea4e0f7be3c059b37e4c8b07785c9ebc31d97643b84614b9fd1478d5a8c562 golang-misc-1.26.7-1.module+el8.10.0+24751+b3673b3e.noarch.rpm SHA-256: 6bb495a0e21f32213276b1ac2b02e7c0c69bee07ef65a019535c1b82a875d15f golang-