Red Hat Product Errata RHSA-2026:61882 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:61882 - Security Advisory Overview Updated Packages Synopsis Important: golang security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for golang is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The golang packages provide the Go programming language compiler. Security Fix(es): encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) net/ http: golang: Go net/ http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2515815 - CVE-2026-33818 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal BZ - 2515820 - CVE-2026-56860 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution BZ - 2515827 - CVE-2026-56853 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service BZ - 2515838 - CVE-2026-56858 html/template: golang: Go html/template: Cross-Site Scripting via pathological input BZ - 2515839 - CVE-2026-56862 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages BZ - 2515840 - CVE-2026-56859 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVEs CVE-2026-33818 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 x86_64 go-toolset-1.26.7-1.el10_0.x86_64.rpm SHA-256: eee4cccb81733c05b930f5912b05d4b360978f102ddf458d4b1b927ff125232f golang-1.26.7-1.el10_0.x86_64.rpm SHA-256: c7ab90779a7a11d04badba5b03542cee36210b918848cabc70abce903916dd2a golang-bin-1.26.7-1.el10_0.x86_64.rpm SHA-256: 9eb1d372cae508a563e2f5df883e6ac0fe47940a30ac9b6150556afedc78e460 golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.x86_64.rpm SHA-256: 9805f4f592c5417d02ec815aee0222b52821685de55f4346901365c43be36c5c golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 s390x go-toolset-1.26.7-1.el10_0.s390x.rpm SHA-256: a31750392642af50e809998ca9485570ac8f35920ebd6bf6dfb1c974fc30b762 golang-1.26.7-1.el10_0.s390x.rpm SHA-256: 6a98e5f01d1d44a65a667b5cae492e61b94ff2459f3462acf8470d4faadb794f golang-bin-1.26.7-1.el10_0.s390x.rpm SHA-256: fc78f943ede85fc10bef4f664e1b3b1e26cf0a768df1d6199924faa495856023 golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.s390x.rpm SHA-256: 4707d1907691c1d5593e6a3fb163a3c5803cc39f4c7cadb7820502ef5c806eba golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 ppc64le go-toolset-1.26.7-1.el10_0.ppc64le.rpm SHA-256: e661d726b6cc65f01dd965d98fccfb474bf0c1db55370e90e8383d1e4cd63adc golang-1.26.7-1.el10_0.ppc64le.rpm SHA-256: 096f6fc9a4d0742d6ce83cc654c18e188855a3474f85f3899ae13995bbb311a1 golang-bin-1.26.7-1.el10_0.ppc64le.rpm SHA-256: 191cf7fdd84561b22753f0ecc4ed5750295ad260406588e6ba57abba154d2cb7 golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.ppc64le.rpm SHA-256: fb94f67dd5969532bf2d9728197e1a50b66f7d1fddaba720a61407edca5f4848 golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 aarch64 go-toolset-1.26.7-1.el10_0.aarch64.rpm SHA-256: 7be90e5170a437fd7ded1a1ad5315f2a6a21c3634b668f7374ac8e6a06db0661 golang-1.26.7-1.el10_0.aarch64.rpm SHA-256: 40b630ce865dddc87a2441bc32c9946ffd5c09a739ae0531f2b58be38dc4a3d8 golang-bin-1.26.7-1.el10_0.aarch64.rpm SHA-256: 70916ab1df1d054e0b3fad207a9cad24102829a441035a8da49e9a5bb4a9befc golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.aarch64.rpm SHA-256: 5517bf19962d1f703d6297aca995414a1ffc3e819cd3b25d2c7a44faf2f0b300 golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 aarch64 go-toolset-1.26.7-1.el10_0.aarch64.rpm SHA-256: 7be90e5170a437fd7ded1a1ad5315f2a6a21c3634b668f7374ac8e6a06db0661 golang-1.26.7-1.el10_0.aarch64.rpm SHA-256: 40b630ce865dddc87a2441bc32c9946ffd5c09a739ae0531f2b58be38dc4a3d8 golang-bin-1.26.7-1.el10_0.aarch64.rpm SHA-256: 70916ab1df1d054e0b3fad207a9cad24102829a441035a8da49e9a5bb4a9befc golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.aarch64.rpm SHA-256: 5517bf19962d1f703d6297aca995414a1ffc3e819cd3b25d2c7a44faf2f0b300 golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM golang-1.26.7-1.el10_0.src.rpm SHA-256: 5d90c77fb22ca6f321630b02b34bf6c7503aa9892d6088c65d26fca4d82f4c07 s390x go-toolset-1.26.7-1.el10_0.s390x.rpm SHA-256: a31750392642af50e809998ca9485570ac8f35920ebd6bf6dfb1c974fc30b762 golang-1.26.7-1.el10_0.s390x.rpm SHA-256: 6a98e5f01d1d44a65a667b5cae492e61b94ff2459f3462acf8470d4faadb794f golang-bin-1.26.7-1.el10_0.s390x.rpm SHA-256: fc78f943ede85fc10bef4f664e1b3b1e26cf0a768df1d6199924faa495856023 golang-docs-1.26.7-1.el10_0.noarch.rpm SHA-256: 751f7328109d3507b56269f95846628749f3f33914ad2a070818171f77dafae3 golang-misc-1.26.7-1.el10_0.noarch.rpm SHA-256: 3a9c85101d5d3aa5b38bbe9e87fbb9366805a7e83c9811b59c0754ae9561b156 golang-race-1.26.7-1.el10_0.s390x.rpm SHA-256: 4707d1907691c1d5593e6a3fb163a3c5803cc39f4c7cadb7820502ef5c806eba golang-src-1.26.7-1.el10_0.noarch.rpm SHA-256: b5e894aa24a3616fa5ba263c258dbb4cd03fab2b2b981c350e0c6b7a5095db2c golang-tests-1.26.7-1.el10_0.noarch.rpm SHA-256: 04bbf0f7088b03e9136b5b51d88d0a5a57ab2547d6d13d48ef3bbbc3f7a54bee Red Hat Enterprise Linux f